GitHub user rnewson added a comment to the discussion: CouchDB Password Complexity
There are no plans to add any of these features. You can use other authentication handlers (like proxy or JWT) instead and then move your password management external to CouchDB? Some of your suggestions represent outdated security practices (forced expiration, "special" characters) and we would not adopt them in 2026. We would consider a pull request that introduced the things that NIST currently recommend, which is essentially just a minimum length of password. I also note it is possible to add MFA (https://docs.couchdb.org/en/stable/api/server/authn.html#logging-in-with-2fa) GitHub link: https://github.com/apache/couchdb/discussions/6085#discussioncomment-17893343 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected]
