Log Bad Passwords

One day, while trying to remember which password I used to log into my Google account, it occurred to me that Google could easily track bad passwords and associate them to a particular user. With this information, along with the rest of what Google knows about us, they could easily gain access to other accounts and services.

Joomla
Plugins
Log Bad Passwords
v
Joomla! 3

P

P

So, I wrote this pair of plugins to provide this capability to Joomla administrators. Because this plugin only stores bad passwords, storing clear text passwords isn't exactly a security risk because they're known bad. When a user changes his or her password to one that is already in the stored list, that password is cleared from the list.

The list appears on the user edit screen in administrator and nowhere else. Administrators also have the option of clearing the list for individual users. Additionally, the plugin can be configured to store bad passwords for the frontend, the backend and to exclude specific groups from bad password storage.

Use is easy.

  1. Install the package.
  2. Enable both plugins.
  3. Configure the User - Log Bad Passwords plugin to set where it should run, and what group restrictions should be enabled.

This package was an experiment, to determine if it could be safely built. I wouldn't suggest running it on public sites because it may expose the passwords your users use on other sites.

Is this extension unethical? It depends on what you use it for. For a support representative on a private intranet site - this can be a very useful tool. Using this on a public site may be more questionable. I released it so everyone would know it's possible, as a warning - not so accounts can be compromised. Either way - please keep your opinions on ethics out of your review. I am a messenger. Disliking the message makes it is no less true.

If you're concerned that a site might be using it, you can browse the site for /plugins/system/logbadpasswords/index.html . If the page is blank, the site uses the extension. If you receive an error - the site does not use it.

Features:

  • Configurable to ignore certain users

Download the Package

  Log Bad Passwords (3x) 1.22870

  Report a Bug   Documentation

4 Reviews

Retrieved from JED monthly

Complete - Unfiltered

Why is this software free?

I’m ditching the freemium game and giving this software to the Joomla crowd for free. It’s a nod to “Jumla”—Swahili for “all together”—because fragmentation sucks, and I’d rather focus on innovation and paid gigs. Use it, build with it, and if you need custom work, I’m super into that.

What's The Catch?

There isn’t one! I’m all about building tools that empower the Joomla community and spark creativity. This software’s free because I’d rather see it in your hands - fueling awesome projects. If you really feel like paying something, I’d appreciate a review in the Joomla Extension Directory—your feedback means a lot!