Display password hint on additional screens

[petitphp]

In WordPress 4.1.0, the function wp_get_password_hint was introduced. This function returns a hint to display to the user when creating a new password.

Currently, it is only used when user go through the "Forget password" steps. This ticket and the PR with it add the password hint to three screens, WordPress install screen, new user screen and user profile screen.

[petitphp]

Password hint on install screen

[petitphp]

Password hint on new user screen

[petitphp]

Password hint on user profile screen

Show passwords hint on :

• WordPress installation screen
• new user screen
• user profile screen

Trac ticket: https://core.trac.wordpress.org/ticket/58312

[SergeyBiryukov]

Hi there, thanks for the ticket.

Interesting, wp_get_password_hint() was initially used on all of these screens, but somehow got phased out as part of UI updates. If I had to guess, it was probably to clean up the UI, as the password is now autogenerated by default, and it can be up for discussion if the hint is still relevant in that case.

Some history here:

• [29962] introduced _wp_password_hint().
• [30033] renamed it to _wp_get_password_hint().
• [30940] dropped the underscore prefix.
• [33023] removed it from the Add New User and Edit User screens.
• [33246] removed it from the Installation screen.

[petitphp]

Hi @SergeyBiryukov

Thanks for looking up history for the function.

Interesting, wp_get_password_hint() was initially used on all of these screens, but somehow got
phased out as part of UI updates. If I had to guess, it was probably to clean up the UI, as the
password is now autogenerated by default, and it can be up for discussion if the hint is still
relevant in that case.

I can see why this could be the case. However, without them, it's really hard to display any kind of info to the user about custom password's validation rules that could exist (mainly in the enterprise context). Currently, the way it can be done is using JS to inject password hint dynamically.

I totally get your point about keeping a clean UI, I'm thinking we could add a new filter to choose if the hint should be shown ?

if ( apply_filter( 'show_password_hint', false ) ) {
    //...
}

[amimulihsanmahdi]

I have tested the patch and the password hint appeared, tested for New Install, user add, user edit. Please see the sample screenshot.

Testing Machine: Macbook Air 2020(M1 chip)
PHP version: 7.4.33
WordPress: (WordPress-develop:trunk branch)

[petitphp]

Patch refreshed against trunk.

@SergeyBiryukov Do you think the current patch can be merged as is, or should I work on an alternative approach with filters ?

[SergeyBiryukov]

Thanks for the refreshed PR! Moving for 6.4 consideration.

The changes from [33023] & [33246] / #32589 were done in WP 4.3, setting the version accordingly.

I wonder if the hint should perhaps only be displayed if a weak password is detected, along with the existing "Confirm use of weak password" checkbox. Curious to see what others think.

[oglekler]

I think this is a case when we can use Tooltips, but I still didn't manage to move #51006 forward :( Everyone is welcome to help :)

And I agree that better approach will be to show the message if the weak password is detected, this way it will be more noticeable. Possibly it can be marked as other destructive actions. I think we have another ticket, which I cannot recall exactly right now, with an attempt to unify styles for such elements 🤔

[oglekler]

This ticket was discussed during bug scrub.

@SergeyBiryukov please provide your feedback on this one. Thank you 🙏

Add props to @mukesh27

[oglekler]

From my point of view the patch needs a bit of work, so I am moving in into the next milestone to finish.

[audrasjb]

In comment:7, @sergey suggested to display it only when a weak password is proposed.
However, I think it would be hardly accessible, and we would probably need to add some a11y.speak fallback… in my opinion we need to choose between display the hint or not.

[oglekler]

This ticket was discussed during bug scrub, and sadly, we have to move it to the Future releases with #51006. We will return it back when #51006 will be ready. Another related ticket is #55343

Add props fo @hellofromTonya and @audrasjb