Password Complexity

MR(MembershipReboot) allows for easy configuration of password complexity rules. This is used to enforce the strength of the password and will help in resisting password guessing and brute-force attacks. To do this you use the ConfigurePasswordComplexity() method of MembershipRebootConfiguration class, and set the minimum length and the complexity rule e.g:

var config = new MembershipRebootConfiguration();
config.ConfigurePasswordComplexity(minimumLength: 7, minimumNumberOfComplexityRules: 3);

//using an IoC container(Ninject)
kernel.Bind<MembershipRebootConfiguration>().ToConstant(config);

The complexity rule will require; one upper, one lower, one digit or one other(e.g @, #), and is set using the minimumNumberOfComplexityRules parameter.