Assume you might be the usage of a password supervisor (if you do not, cross and set up one now — the web is a frightening position, and breaches occur at all times); you could have run into eventualities when your password supervisor comes up with a well cryptic and distinctive password that’ll be rejected via a website online as a result of it is too lengthy, makes use of now not allowed characters or different nonsense.

If that occurs, you will have to assessment in case you actually wish to subscribe someplace, however additionally it is deficient UX. Would it not be nice if there was once a declarative option to tell password managers about supported password combos?

It turns available in the market is — type of. If you are within the Apple ecosystem and use the local password control equipment, Safari helps a passwordrules HTML characteristic to keep an eye on its password autofill function. 1Password additionally turns out to pick out up the characteristic.

<enter kind="password" 
  passwordrules="minlength: 8; required: decrease; required: higher; required: digit; required: [_];">

If you wish to mess around with passwordrules, Apple supplies a device to generate regulations and you’ll check it out in Safari. The function labored for easy configurations however implementing Unicode characters equivalent to ⭐ did not paintings for me. 😅

So far as I will be able to inform, there is no correct spec concerning the HTML characteristic but, however it is up for dialogue since 2018 (thank you Dennis Schubert). And whilst digging deeper (thank you Thomas Broyer), I came upon that passwordrules almost certainly may not cross anyplace quickly as a result of Mozilla does not suppose it is a good suggestion.

Let’s have a look at how this seems!