In Progress Username allowed in password

[Sis.temas]

I have recently verified that you can use your own username as a password (at least for email from CPanel)

Example:
Email: [email protected]
Password: john.smith23

My CPanel says it is a very secure password!!

Is there a way to prevent this terrible feature?

 

[GOT]

Are you the root admin? If so, set you password strength minimums much higher. Its in whm in the security section.

 

[Sis.temas]

That wouldn't help much because the password "john.smith23", which is exactly the username, has already a score of 94.
There should be a specific check that the username is not contained in the password.

After reading this I would think that this option would exist:

https://features.cpanel.net/topic/option-to-allow-passwords-with-username-in-them

But my experience is just the opposite of what that thread says. I'm quite confused.

 

[cPanelLauren]

That Feature request you note is referencing the cPanel account's username you're referencing an email account - which I'd assume would be different. I do agree with you that this should not be the case. I was able to replicate this and I will open a case on this and update you of the case ID as soon as I have it available.