Visual regex workbench

Advanced Visual Regex Builder v3.8

Build, import, explain, test and share regex visually.

Regex guide

Password Regex Examples

Password validation is one of the most common regex use cases. This guide provides practical password regex examples ranging from simple minimum-length validation to strong password policies.

4 examples
Minimum 8 characters Letters and numbers Strong password Strong password (12+ chars)
7 guides
Why validate passwords with regex? Common password requirements Strong passwords vs complex passwords Can regex measure password strength? Client-side and server-side validation Common password validation mistakes Modern password recommendations
Open the regex builder

Minimum 8 characters

Requires at least 8 characters.

Suggested pattern

^.{8,}$
Quick test
Open in Visual Builder

What it matches

  • password123
  • mypassword

Common limitations

  • Does not require numbers.
  • Does not require uppercase letters.

Letters and numbers

Requires at least one letter and one digit.

Suggested pattern

^(?=.*[A-Za-z])(?=.*\d).{8,}$
Quick test
Open in Visual Builder

What it matches

  • password123
  • abc12345

Common limitations

  • Does not require uppercase letters.
  • Does not require special characters.

Strong password

Requires lowercase, uppercase, number and special character.

Suggested pattern

^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[^A-Za-z\d]).{8,}$
Quick test
Open in Visual Builder

What it matches

  • Password1!
  • MySecure#2026

Common limitations

  • May be considered too restrictive.

Strong password (12+ chars)

A stronger policy requiring at least 12 characters.

Suggested pattern

^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[^A-Za-z\d]).{12,}$
Quick test
Open in Visual Builder

What it matches

  • MySecurePass#2026

Common limitations

  • Long passwords may reduce usability.

Why validate passwords with regex?

Password regex patterns help enforce basic security rules before a password is accepted by an application.

They can require minimum lengths, uppercase letters, lowercase letters, numbers and special characters, helping users create stronger passwords.

Common password requirements

Most modern applications require a minimum password length and encourage a mix of character types.

Typical rules include at least one uppercase letter, one lowercase letter, one digit and one special character.

Strong passwords vs complex passwords

A complex password is not always a strong password. Adding a special character to a short or predictable password does not guarantee good security.

Long passwords and passphrases are often more secure than short passwords with many symbols.

Can regex measure password strength?

Regex can verify whether a password follows formatting rules, but it cannot determine how resistant that password is to attacks.

True password strength depends on length, randomness, uniqueness and resistance to guessing techniques.

Client-side and server-side validation

Regex validation is commonly used on the client side to provide immediate feedback to users.

However, password requirements should always be validated again on the server side because client-side checks can be bypassed.

Common password validation mistakes

Some password policies become so strict that they frustrate users without significantly improving security.

Good validation rules should balance usability, security and maintainability.

Modern password recommendations

Many security organizations now recommend longer passwords and passphrases instead of extremely complex composition rules.

A password manager can help users generate and store secure passwords without having to remember complicated patterns.

More Regex Guides

Email Regex Test and understand practical email patterns you can adapt. 2 examples URL Regex Validate or extract URLs with interactive examples. 2 examples Phone Number Regex Validate international, French, US and E.164 phone numbers. 5 examples Username Regex Validate usernames, handles, slugs and account names. 6 examples Date Regex Validate DD/MM/YYYY, ISO dates and timestamps. 5 examples IP Address Regex Validate IPv4, private IP ranges, CIDR notation and IPv6 basics. 5 examples UUID Regex Validate UUID v4, UUID v1-v5 and UUIDs without hyphens. 4 examples Hex Color Regex Validate CSS hex colors like #fff, #ffffff and alpha colors. 6 examples Domain Name Regex Validate domains, subdomains, TLDs and lowercase domain names. 6 examples Slug Regex Validate SEO-friendly slugs and URL-safe identifiers. 5 examples Regex Cheatsheet Quickly find anchors, classes, groups and quantifiers. 5 examples Regex Tutorial Learn regular expressions step by step from the basics. 3 examples JavaScript Lookbehind Understand lookahead, lookbehind and compatibility limits. 2 examples JavaScript Regex vs PCRE Compare regex engines, flags and feature support. 2 examples