Java

Java

ZIP code regex Java
ZIP code
XML regex Java
XML
UUID regex Java
UUID
URL regex Java
URL
Street address regex Java
Street address
SSN regex Java
SSN
Regex match words Java
Words match
Phone number regex Java
Phone number
Password regex Java
Password
Numbers only regex (digits only) Java
Numbers only (digits only)
Mac address regex Java
Mac address
IP address regex Java
IP address
HTML regex Java
HTML
GUID regex Java
GUID
Email regex Java
Email
Date regex Java
Date
Password regex Java

Password regex Java

Password regular expression can be used to verify that a password provided is strong enough to provide better protection against bot brute force attacks. This method, however, does not guarantee that a password will have enough entropy to be completely safe.

JavaScript
JavaScript
Python
Python
Java
Java
C#
C#
PHP
PHP

Strong password regex

The regular expression below cheks that a password:

  • Has minimum 8 characters in length. Adjust it by modifying {8,}
  • At least one uppercase English letter. You can remove this condition by removing (?=.*?[A-Z])
  • At least one lowercase English letter.  You can remove this condition by removing (?=.*?[a-z])
  • At least one digit. You can remove this condition by removing (?=.*?[0-9])
  • At least one special character,  You can remove this condition by removing (?=.*?[#?!@$%^&*-])
Pattern.compile("^(?=.*?[A-Z])(?=.*?[a-z])(?=.*?[0-9])(?=.*?[#?!@$%^&*-]).{8,}$")

Test it!
/^(?=.*?[A-Z])(?=.*?[a-z])(?=.*?[0-9])(?=.*?[#?!@$%^&*-]).{8,}$/

True

False

Enter a text in the input above to see the result

Example code in Java:

import java.util.regex.Pattern;

public class Main {

    public static void main(String []args) {
        // Validate strong password
        boolean isMatch = Pattern.compile("^(?=.*?[A-Z])(?=.*?[a-z])(?=.*?[0-9])(?=.*?[#?!@$%^&*-]).{8,}$")
               .matcher("-Secr3t.")
               .find(); 
        System.out.println(isMatch); // prints true
    }
}

Test it!

True

False

Enter a text in the input above to see the result

Test it!

True

False

Enter a text in the input above to see the result

Notes on password regex validation

While this regex validation is better than nothing, in situations when additional security is needed you should also check the password entered for a set of commonly used passwords like:

  • .Qwerty1
  • !Q1w2e3r4
  • etc

One good list can be found here.