Vague error message is shown when invalid password entered during sign up process

[tomwitkin]

"Your password is invalid because it does not meet our security guidelines. Please try a more complex password"

This is even more vague than on iOS: wordpress-mobile/WordPress-iOS#331

[maxme]

Unfortunately the REST error is vague: "{"error":"password_invalid","message":"Invalid password"}"

I tried on the website, errors are vague AND confusing: https://cloudup.com/clahwj2Z8zR

2 solutions:

• server side modification to add better error description + correct interpretation of the REST errors on client side
• workaround: hardcode password rules in mobile client (and hope those rules are rarely modified). And no network call to check for a good password means faster feedback for the user.

[maxme]

I just noticed we already have some rules to verify password on Android:

[tomwitkin]

I think a good first step would just be explicitly putting the rules into the error message, such as: "You need a more secure password. Make sure to use 7 or more characters, at least 1 letter and 1 number" etc...

cc wordpress-mobile/WordPress-iOS#331

[tomwitkin]

I also think on device checking is a good thing to implement as well since the rules will not change very often.

[maxme]

[tomwitkin]

If we can't improve the API or add local password checking, we may want to ask Editorial to polish the phrasing.

[maxme]

Fixed in #355