Passay Tutorial on Passay Overview

passay is a java based password generation and validation library. it provides comprehensive features list in order to validate/generate passwords and is highly configurable.

passay components

passay api has 3 core components.

  • rule − one or more rules which define a password policy rule set.

  • passwordvalidator − a validator component which validates a password against a given rule set.

  • passwordgenerator − a generator component which produces passwords to satisfy a given rule set.

rule overview

rules are the foundation blocks for both password validation and generation. there are two broad categories of rules:

  • positive match require that passwords satisfy a rule.

  • negative match reject passwords that satisfy a rule.

features

following are some of the features that passay library provides.

  • password validation − passay library helps in enforcing a password policy by validating passwords against a configurable rule set. it has a rich set of existing rules for common use-cases. for additional cases, it provides a simple rule interface to implement the custom rule.

  • password generation − it provides a configurable rule set which can be used to generate passwords as well.

  • command line tools − it provides tools to automate password policy enforcement.

  • convenient − easy to use.

  • extensible − all passay components are extensible.

  • supports internalization - passay components are internationalization ready.