Advanced Password Policy Signup
by Viindoo
| Lines of Code | 349 |
| Technical name | viin_auth_password_policy_signup |
| License | OPL-1 |
| Website | https://viindoo.com/apps/modules/19.0/viin_auth_password_policy_signup |
| Read description for | v 15.0 v 16.0 v 17.0 v 18.0 |
| Required Apps | Discuss (mail) |
| Included Dependencies | Advanced Password Policy |
No account starts with a password your policy would refuse
For companies that let customers, partners or invited users set their own Odoo password
Apply the password character rules on the sign-up, invitation and reset-password pages, with a strength bar that checks them as people type
Odoo 19.0 · Community and Enterprise editions · OPL-1
Extends Advanced Password Policy, where the password rules are chosen once for the whole database.
What changes for your team
New users see your rules while they type
On a public page, the strength bar judges length and guessability only, so it can rate a password strong that your policy then refuses.
→ On the sign-up, invitation and reset pages the bar marks a password down while a required character type is missing, and hovering it lists the rules that apply.
One policy for staff and the public
A password standard that covers internal users but not self-service accounts leaves the weakest passwords with the people you know least.
→ The rules ticked in the general settings apply to every public password page as well. There is nothing to configure twice and nothing to keep in sync.
An invitation survives a mistyped password
A person who opens an invitation or a reset link and picks a password that breaks a rule should not need a second email to try again.
→ The password is checked before the link is used. The person corrects it on the same page, and the link is spent only when a valid password is saved.
Ready on day one
Installs by itself
It is added automatically once Advanced Password Policy and Odoo's sign-up password policy are both installed. No data to import.
Follows the rules you already set
The public pages read the same switches as the rest of Odoo. A rule left off is not asked for on any page.
What you configure first
An administrator ticks the required rules and, to let visitors register, allows free sign-up. Both sit in the general settings.
What is included
The rule-aware strength bar and the policy check on the three pages where people choose a password without being logged in: sign-up, invitation and password reset.
Before you decide
Do I need to open free sign-up?
No. Invitation and reset links follow the rules whichever sign-up mode you choose. The sign-up page itself appears only when free sign-up is allowed.
What does a visitor have to retype after a refusal?
Only the password. The name and email stay in the form, and one message lists every rule the password missed.
Which languages do visitors see?
Refusal messages follow the visitor’s language. English and Vietnamese translations ship with Advanced Password Policy.
Can each company or website have its own rules?
No. The rules apply to the whole database, so every company shares one password policy.
Does it send passwords anywhere?
No. Passwords are checked by your own Odoo server and stored the way Odoo always stores them. The module calls no outside service.
Try it, then ask us
Open the Live Preview to try it on a working database, and read the Documentation tab for the setup and both public pages.
Pre-sales & partnership
viindoo.com/contactusTechnical support
viindoo.com/ticketTechnical requirements
- Odoo version: 19.0
- Editions: Community, Enterprise
- Required modules: Advanced Password Policy, Password Policy support for Signup (Odoo)
- License: OPL-1
- Languages: English, Vietnamese
Advanced Password Policy Signup
For: system administrators who configure sign-up, and for the people who register or set a new password on the public pages.
Note
Extends Advanced Password Policy - see its documentation for the four password rules and for how they apply inside the application.
Overview
A password that is long enough can still be easy to guess. Advanced Password Policy lets the administrator require lowercase letters, uppercase letters, digits and special characters. This module carries the same rules onto the public pages where people choose a password without being logged in:
- the Sign up page, where a visitor creates an account;
- the Reset Password page, opened from the link of an invitation or of a password reset email.
On both pages the password strength meter takes the rules into account, and a password that breaks a rule is refused with a message that lists every broken rule at once. The module installs by itself when Advanced Password Policy and the standard sign-up password policy are both installed.
The process, from the administrator's choice to the person's new password:
- Administrator - turns on the rules that apply and allows free sign-up. The choice is saved once and applies to every page.
- Visitor or invited user - types a password on the Sign up or Reset Password page, sees the meter, and is either accepted or told which rules are missing.
| Role | What they do | Access right to assign |
|---|---|---|
| System Administrator | Chooses the password rules and allows free sign-up | Role: Administrator |
| Visitor or invited user | Creates an account or sets a new password from a link | None: the pages are open without login |
Setup (for the System Administrator)
Installation
Open Apps, remove the default filter, search for Advanced Password Policy and click Install if it is not installed yet. This module is added automatically as soon as Advanced Password Policy and the standard sign-up password policy are installed.
Choose the rules
- Open Settings ‣ General Settings and go to the Permissions section.
- Tick the rules to require: Require Lowercase Character, Require Uppercase Character, Require Numeric Character, Require Special Character.
- Click Save.
The Minimum Password Length next to them still applies. A special character is one of !@#$%^&*(),.?":{}|<>. Rules left unticked are not required and do not appear on the public pages.
Allow visitors to register
In the same screen, under Customer Account, select Free sign up and click Save. With On invitation, the Sign up page is not offered, and only the Reset Password page applies.
Visitor: create an account
A visitor opens the Sign up page from the link on the login page.
- Fill in Name and Email.
- Type a Password. The meter above the field changes as you type. It stays low while a required kind of character is missing; point at the meter to see the list of required rules.
- Type the same password in Confirm Password.
- Click Sign up.
When the password breaks a rule, no account is created. The form stays open with the name and the email, and one message lists every rule that is not met. Choose a new password and click Sign up again.
When the password follows every rule, the meter fills and the account is created.
Invited user: set a new password from a link
A link comes by email when the administrator invites a person or sends reset instructions (in Settings ‣ Users & Companies ‣ Users, open the user and choose Send Password Reset Instructions).
- Open the link. The Reset Password page shows two fields.
- Type the Password and Confirm Password, watching the meter.
- Click Reset Password.
If the password breaks a rule, the page stays open and lists the missing rules. The link remains valid: type another password on the same page and click Reset Password again. A password that follows every rule is saved, the page confirms it, and the link cannot be used a second time.
This software and associated files (the "Software") may only be used (executed, modified, executed after modifications) if you have purchased a valid license from the authors, typically via Odoo Apps, or if you have received a written agreement from the authors of the Software (see the COPYRIGHT file).
You may develop Odoo modules that use the Software as a library (typically by depending on it, importing it and using its resources), but without copying any source code or material from the Software. You may distribute those modules under the license of your choice, provided that this license is compatible with the terms of the Odoo Proprietary License (For example: LGPL, MIT, or proprietary licenses similar to this one).
It is forbidden to publish, distribute, sublicense, or sell copies of the Software or modified copies of the Software.
The above copyright notice and this permission notice must be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.