Visual regex workbench

CreateRegex v4

Build, test, explain and master regex with visual tools, guides, examples and a growing regex library.

Regex guide

Password Regex Examples

Password validation is one of the most common regex use cases. This guide provides practical password regex examples ranging from simple minimum-length validation to strong password policies.

4 examples
Minimum 8 characters Letters and numbers Strong password Strong password (12+ chars)
7 guides
Why validate passwords with regex? Common password requirements Strong passwords vs complex passwords Can regex measure password strength? Client-side and server-side validation Common password validation mistakes Modern password recommendations
Learn more
Testing Regex Input Validation Best Practices Common Regex Mistakes
Open the regex builder

Minimum 8 characters

Requires at least 8 characters.

Suggested pattern

^.{8,}$
Quick test
Open in Visual Builder

What it matches

  • password123
  • mypassword

Common limitations

  • Does not require numbers.
  • Does not require uppercase letters.

Letters and numbers

Requires at least one letter and one digit.

Suggested pattern

^(?=.*[A-Za-z])(?=.*\d).{8,}$
Quick test
Open in Visual Builder

What it matches

  • password123
  • abc12345

Common limitations

  • Does not require uppercase letters.
  • Does not require special characters.

Strong password

Requires lowercase, uppercase, number and special character.

Suggested pattern

^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[^A-Za-z\d]).{8,}$
Quick test
Open in Visual Builder

What it matches

  • Password1!
  • MySecure#2026

Common limitations

  • May be considered too restrictive.

Strong password (12+ chars)

A stronger policy requiring at least 12 characters.

Suggested pattern

^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[^A-Za-z\d]).{12,}$
Quick test
Open in Visual Builder

What it matches

  • MySecurePass#2026

Common limitations

  • Long passwords may reduce usability.

Why validate passwords with regex?

Password regex patterns help enforce basic security rules before a password is accepted by an application.

They can require minimum lengths, uppercase letters, lowercase letters, numbers and special characters, helping users create stronger passwords.

Common password requirements

Most modern applications require a minimum password length and encourage a mix of character types.

Typical rules include at least one uppercase letter, one lowercase letter, one digit and one special character.

Strong passwords vs complex passwords

A complex password is not always a strong password. Adding a special character to a short or predictable password does not guarantee good security.

Long passwords and passphrases are often more secure than short passwords with many symbols.

Can regex measure password strength?

Regex can verify whether a password follows formatting rules, but it cannot determine how resistant that password is to attacks.

True password strength depends on length, randomness, uniqueness and resistance to guessing techniques.

Client-side and server-side validation

Regex validation is commonly used on the client side to provide immediate feedback to users.

However, password requirements should always be validated again on the server side because client-side checks can be bypassed.

Common password validation mistakes

Some password policies become so strict that they frustrate users without significantly improving security.

Good validation rules should balance usability, security and maintainability.

Modern password recommendations

Many security organizations now recommend longer passwords and passphrases instead of extremely complex composition rules.

A password manager can help users generate and store secure passwords without having to remember complicated patterns.

Continue learning

📘 Recommended guide

Testing Regex

Password regexes should be tested with valid passwords, missing requirements, short values and edge cases.

Do not test only one strong password. Make sure each rule is actually enforced.

Read the complete guide →
📘 Recommended guide

Input Validation Best Practices

Password validation should combine regex rules with clear messages, server-side checks and secure storage practices.

Read the complete guide →
📘 Recommended guide

Common Regex Mistakes

Password regexes are easy to overcomplicate with too many lookaheads or unclear requirements.

Readable rules are easier to test, explain and maintain.

Read the complete guide →

More Regex Guides

Email Regex Test and understand practical email patterns you can adapt. 16 examples URL Regex Validate or extract URLs with interactive examples. 2 examples Phone Number Regex Validate international, French, US and E.164 phone numbers. 5 examples Username Regex Validate usernames, handles, slugs and account names. 6 examples Date Regex Validate DD/MM/YYYY, ISO dates and timestamps. 5 examples IP Address Regex Validate IPv4, private IP ranges, CIDR notation and IPv6 basics. 5 examples UUID Regex Validate UUID v4, UUID v1-v5 and UUIDs without hyphens. 4 examples Hex Color Regex Validate CSS hex colors like #fff, #ffffff and alpha colors. 6 examples Domain Name Regex Validate domains, subdomains, TLDs and lowercase domain names. 6 examples Slug Regex Validate SEO-friendly slugs and URL-safe identifiers. 5 examples Credit Card Regex Validate credit card number formats and understand regex limitations. 15 examples Regex Cheatsheet Quickly find anchors, classes, groups and quantifiers. 5 examples Regex Tutorial Learn regular expressions step by step from the basics. 3 examples Regex Limitations Understand what regex can and cannot validate. Guide Testing Regex Learn how to test regex patterns properly. Guide Regex Compatibility Understand regex differences between engines and languages. Guide Regex Performance Learn how to write fast and efficient regex patterns. Guide Input Validation Best Practices Build reliable and secure input validation. Guide Common Regex Mistakes Avoid the most common regex mistakes. Guide JavaScript Lookbehind Understand lookahead, lookbehind and compatibility limits. 2 examples JavaScript Regex vs PCRE Compare regex engines, flags and feature support. 2 examples Character Classes Understand regex character classes and shortcuts. 10 examples Quantifiers Understand repetition and regex quantifiers. 8 examples Groups Understand regex groups and captures. 9 examples Anchors Understand regex anchors and boundaries. 8 examples Alternation Understand regex alternatives and OR logic. 8 examples Lookarounds Understand lookaheads and lookbehinds. 8 examples