Galette/Doc - User: Preferences — Italian @ Hosted Weblate: blacklist,

	English	Italian	Actions
	Complex password rules are not user friendly; but security is mainly never :)
	Of course, all passwords should be as secure as possible, but this is especially true for all accounts that have privileges (staff, admin, super-admin); you may explain your users why this is important.
	You can enforce some rules for members (and super-admin) passwords:
	minimum length (6 characters or more),
	minimum "strength",
	blacklist,	blacklist,
	no personal information.
	Galette settings, security tab
	Length is still the only rule that is active per default, just configure the number of characters required. On passwords fields, failures will be displayed on the fly; as well as a "strength meter" displayed for information.
	If you enable password checks, it is not possible to know if some of existing ones does not respect them. Galette will display a warning at login if checks are not respected, but login will still be possible!
	But wait... Password security is important, but Galette does not enforce nothing! Isn't that dumb? Well, not really. For tests or entirely private instances, security may be less important; and in some cases, being too restrictive may be an issue for your users; that's why this is up to you to secure as needed; just like using SSL or not :)