Password requirements

…In addition to encrypting passwords, we also want…to encourage our users to use good passwords.…And we're going to do that by…implementing some password requirements in the application.…There are three main recommendations that I want us to take a look at.…The first, is that you should require a long password.…Require passwords of at least a certain length.…Don't limit the length, longer is always better.…A ten-character password is much more secure than an eight-character one.…So, don't limit the length, however we can use our validations that we wrote earlier.…

We wrote a custom has_length function.…We pass in a string, and we can then tell…it that it has to have a minimum of eight characters.…You can make this whatever number you like, it can be ten, it can be 12.…But the idea is we want our users to…use long passwords, because they're going to be more secure.…We'll talk more about why that's true, when we talk about brute force attacks.…The second point, is to require users to use non-alphanumeric characters.…