Membership.PasswordStrengthRegularExpression Property


Gets the regular expression used to evaluate a password.

Namespace:   System.Web.Security
Assembly:  System.Web (in System.Web.dll)

public static string PasswordStrengthRegularExpression { get; }

Property Value

Type: System.String

A regular expression used to evaluate a password.

The PasswordStrengthRegularExpression property gets the regular expression used to evaluate password complexity from the provider specified in the Provider property.

The PasswordStrengthRegularExpression property is set in the application configuration using the passwordStrengthRegularExpression attribute of the configuration element.

For more information about regular expressions, see .NET Framework Regular Expressions.

The following code example shows the configuration element in the system.web section of the application's Web.config file. It specifies that the application use an instance of the SqlMembershipProvider class to provide membership services, and sets the passwordStrengthRegularExpression attribute to a regular expression that validates the password meets the following criteria:

  • Is greater than seven characters.

  • Contains at least one digit.

  • Contains at least one special (non-alphanumeric) character.

If the password does not meet these criteria, the password is not accepted by the membership provider.

<membership defaultProvider="SqlProvider"
  userIsOnlineTimeWindow = "20>
      passwordStrengthRegularExpression=" @\"(?=.{6,})(?=(.*\d){1,})(?=(.*\W){1,})"

.NET Framework
Available since 2.0
Return to top