Weave Code
Sentinel Unique Passwords Laravel Package
cartalyst/sentinel-unique-passwords
A Cartalyst Sentinel extension that enforces unique passwords by tracking password history and blocking reuse of previous passwords. Hooks into Sentinel's user repository to validate passwords during registration and updates.
cartalyst/sentinel-unique-passwords extends Cartalyst Sentinel with password uniqueness validation, helping applications block weak credential practices by rejecting passwords that have already been used. It plugs into Sentinel's existing user and hashing workflow, so password changes and resets can be validated without rewriting authentication logic.
- Prevents users from reusing previous passwords
- Hooks into Sentinel's password update and reset flow
- Configurable password history and validation rules
- Works alongside Sentinel's hashing and user repositories
- Simple Laravel service provider registration
Frequently asked questions about Sentinel Unique Passwords
- What is cartalyst/sentinel-unique-passwords used for?
- It is a PHP addon for Cartalyst Sentinel that enforces unique passwords by preventing users from reusing their current or previous passwords. It hooks into Sentinel's user and registration flows to add password history checks. It is aimed at Laravel applications that need stronger account security policies.
- How do I install cartalyst/sentinel-unique-passwords?
- Install it with Composer alongside Cartalyst Sentinel, typically using composer require cartalyst/sentinel-unique-passwords. Confirm the package composer.json constraints before installing, especially the PHP and illuminate/* versions. The provided overview does not include README installation steps, so check the repository for service provider or configuration instructions.
- Does cartalyst/sentinel-unique-passwords support PHP 8?
- Yes, the v5.1.0 release note states that PHP 8 support was added. That release is a minor bump, so it likely widens runtime compatibility while preserving the public API. Verify the declared php constraint and tested CI versions in the repository, because declared support and tested support can differ.
- Does this package support Laravel 9 or Laravel 10?
- The available evidence only confirms PHP 8 support in v5.1.0, not which Laravel majors are allowed. Laravel 9 and later require PHP 8, so PHP 8 support is necessary but not sufficient. Check the package illuminate/* constraints and run composer why-not laravel/framework ^9.0 or ^10.0 against your lockfile.
- How does Cartalyst Sentinel password history checking work?
- The addon hooks into Sentinel's user and registration flows and checks new passwords against stored password history. If a user tries to set the current password or a previous one, the check should block reuse. Implementation details such as history length and storage are package-specific, so review the source or README for exact behavior.
- How many previous passwords can it remember?
- The package description says it blocks reuse of current and previous passwords, but it does not specify a configurable history limit. Check the package configuration and source for the default history count and whether it can be changed. Do not assume a number from the overview alone.
- Does it work with Sentinel registration and password reset flows?
- The overview states it hooks into Sentinel's user and registration flows to add password history checks. Password reset is a common place where reuse checks matter, but the provided context only names user and registration flows. Verify the reset flow behavior in the package tests or source before relying on it.
- How do I test unique password enforcement in my Laravel app?
- Add feature tests that register a user, change the password, and then attempt to reuse the current or a previous password. Assert that Sentinel returns a validation or password error in the reuse cases. Also test a new, unused password to confirm normal updates still succeed. If the package branches on PHP versions, run the suite on each PHP version in your support matrix.
- Is cartalyst/sentinel-unique-passwords maintained and production-ready?
- The only release signal provided is v5.1.0 adding PHP 8 support; no changelog history, issue volume, or maintainer activity was supplied. That makes maintenance activity a risk-framed hypothesis rather than a conclusion. Review the repository's recent commits, releases, open issues, and test matrix before adopting it in production.
- Are there alternatives to cartalyst/sentinel-unique-passwords?
- Alternatives include implementing password history in your own Sentinel integration or using Laravel's built-in password validation rules where they fit your authentication stack. Because this package is specifically an addon for Cartalyst Sentinel, non-Sentinel Laravel apps will need a different approach. Compare maintenance activity, Laravel version support, and test coverage before choosing an alternative.
Weaver
How can I help you explore Laravel packages today?