***

title: "DefaultPasswordValidationStrategy"
generated: true
---------------

<GenerationInfo sourceFile="packages/core/src/config/auth/default-password-validation-strategy.ts" sourceLine="18" packageName="@vendure/core" since="1.5.0" />

The DefaultPasswordValidationStrategy allows you to specify a minimum length and/or
a regular expression to match passwords against. The default `maxLength` is `72`.

TODO:
By default, the `minLength` will be set to `4`. This is rather permissive and is only
this way in order to reduce the risk of backward-compatibility breaks. In the next major version
this default will be made more strict.

```ts title="Signature"
class DefaultPasswordValidationStrategy implements PasswordValidationStrategy {
    constructor(options: { minLength?: number; maxLength?: number; regexp?: RegExp })
    validate(ctx: RequestContext, password: string) => boolean | string;
}
```

* Implements: [`PasswordValidationStrategy`](/current/core/reference/typescript-api/auth/password-validation-strategy#passwordvalidationstrategy)

<div className="members-wrapper">

### validate

\<MemberInfo kind="method" type={`(ctx: <a href='/current/core/reference/typescript-api/request/request-context#requestcontext'>RequestContext</a>, password: string) => boolean | string`}   />

</div>