Bug between global and organization password complexity policy #1463

Closed
opened 2026-04-06 01:54:36 +02:00 by MrUnknownDE · 0 comments
Owner

Originally created by @vcazsdk on 9/5/2023

Subject of the issue

Hi,

When I set the organization's master password policy, this policy is not respected when the user creates a new account after being invited to the organization.

image

Deployment environment

  • vaultwarden version: 1.29.2
  • Install method: Docker

  • Clients used: web vault

  • Reverse proxy and version: NA

  • MySQL/MariaDB or PostgreSQL version: MariaDB

  • Other relevant details:

Steps to reproduce

  1. Create organization
  2. Set master password policy with Weak 2 and 8 char min length
  3. Invite user into organization
  4. Open invite link and create account
  5. Enter password with 8 char length and weak 2 complexity

Expected behaviour

Password should be accept

Actual behaviour

Password length is refused

Thank you for your help and for your work

*Originally created by @vcazsdk on 9/5/2023* <!-- # ### NOTE: Please update to the latest version of vaultwarden before reporting an issue! This saves you and us a lot of time and troubleshooting. See: * https://github.com/dani-garcia/vaultwarden/issues/1180 * https://github.com/dani-garcia/vaultwarden/wiki/Updating-the-vaultwarden-image # ### --> <!-- Please fill out the following template to make solving your problem easier and faster for us. This is only a guideline. If you think that parts are unnecessary for your issue, feel free to remove them. Remember to hide/redact personal or confidential information, such as passwords, IP addresses, and DNS names as appropriate. --> ### Subject of the issue <!-- Describe your issue here. --> Hi, When I set the organization's master password policy, this policy is not respected when the user creates a new account after being invited to the organization. ![image](https://github.com/dani-garcia/vaultwarden/assets/109225886/3ba84812-0cfa-4814-b294-120851600519) ### Deployment environment <!-- ========================================================================================= Preferably, use the `Generate Support String` button on the admin page's Diagnostics tab. That will auto-generate most of the info requested in this section. ========================================================================================= --> <!-- The version number, obtained from the logs (at startup) or the admin diagnostics page --> <!-- This is NOT the version number shown on the web vault, which is versioned separately from vaultwarden --> <!-- Remember to check if your issue exists on the latest version first! --> * vaultwarden version: 1.29.2 <!-- How the server was installed: Docker image, OS package, built from source, etc. --> * Install method: Docker * Clients used: web vault * Reverse proxy and version: NA * MySQL/MariaDB or PostgreSQL version: MariaDB * Other relevant details: ### Steps to reproduce <!-- Tell us how to reproduce this issue. What parameters did you set (differently from the defaults) and how did you start vaultwarden? --> 1. Create organization 2. Set master password policy with Weak 2 and 8 char min length 3. Invite user into organization 4. Open invite link and create account 5. Enter password with 8 char length and weak 2 complexity ### Expected behaviour Password should be accept ### Actual behaviour Password length is refused Thank you for your help and for your work
Sign in to join this conversation.
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github/vaultwarden#1463