Hi everyone, on Enpass 5.5.6 (Linux) I noticed that the password generator uses exactly the configured number of characters per type (i.e. digits, uppers, symbols) and I found no way to specify an "At least #" logic.

For example, using the default configuration the 18-chars password always has 3 digits, 5 uppers, 5 symbols (and 5 lowers, even if not stated), whereas I want it to have a minimum of 1 character per type, as required by most password policies out there.

I would even deem this default configuration a security bug because by greatly reducing the cardinality of the password space you gives an obstinate cracker a sensible advantage.

Is there a way to enable the "At least #" logic? May we expect a more robust password generator in the upcoming release?

Is there any feedback on this topic?

Hi @Nicola 

Thanks for the suggestion. We do have plans to implement a new password generator mechanism which will fulfill your requirement and will be available in the next major update (Enpass 6).  

Cheers!