Tried googling and testing quickstart, but did not...
# talk-kratosb
billions-leather-15882
05/17/2023, 10:50 AMTried googling and testing quickstart, but did not find answer. Is it possible to configure kratos to ask for password twice in registering and also when changing the password (settings)
m
magnificent-energy-493
05/22/2023, 7:43 AM
Hello @billions-leather-15882
It is possible, but usually not required.
Ory has this concept of privileged sessions: https://www.ory.sh/docs/kratos/session-management/session-lifespan#privileged-sessions
If you want the user to supply their current password either:
a) ask for re-auth (refresh session)
b) build custom UI
b
billions-leather-15882
05/22/2023, 7:44 AMMore likely I would like them to enter twice the new password so they don't fuck it up...
billions-leather-15882
05/22/2023, 7:44 AMBut maybe a custom UI it is
m
magnificent-energy-493
05/22/2023, 7:46 AM
Oh I see. That should be doable with a custom UI, but I have no great example for it.
If you figure it out let me know 🙇
We usually omit this second step, because it adds friction and usually does not help much (most users just copy paste the password in both fields). You can easily reset password with recovery.
That being said I think its still useful in some cases to ask for the password twice.
b
billions-leather-15882
05/22/2023, 7:55 AMI guess it depends on the user/customer profile
billions-leather-15882
05/22/2023, 7:56 AMbut that is a good point, that copy & pasting.. of course I use myself a password manager, so it's not really a big deal.. but with this information, maybe I need to have a good talk with designers 🙂
billions-leather-15882
05/22/2023, 7:56 AMThank you anyway!
billions-leather-15882
05/22/2023, 7:56 AMThis was super helpfull!
2 Views