181
votes

What is the regex to make sure that a given string contains at least one character from each of the following categories.

  • Lowercase character
  • Uppercase character
  • Digit
  • Symbol

I know the patterns for individual sets namely [a-z], [A-Z], \d and _|[^\w] (I got them correct, didn't I?).

But how do I combine them to make sure that the string contains all of these in any order?

3
What platform/regex-dialect? Bart's answer is right, but lookahead assertions aren't reliable in JavaScript, for example.bobince
Nowhere in particular - I'm learning regex. Is there an alternative that can be used in javascript?Amarghosh
@bobince Hey, I am trying to find out why lookahead assertions aren't reliable in Javascript. Is there a writeup on this?Chris Bier
@ChrisB: There's a really confusing IE/JScript bug: blog.stevenlevithan.com/archives/regex-lookahead-bugbobince

3 Answers

390
votes

If you need one single regex, try:

(?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?=.*\W)

A short explanation:

(?=.*[a-z])        // use positive look ahead to see if at least one lower case letter exists
(?=.*[A-Z])        // use positive look ahead to see if at least one upper case letter exists
(?=.*\d)           // use positive look ahead to see if at least one digit exists
(?=.*\W])        // use positive look ahead to see if at least one non-word character exists

And I agree with SilentGhost, \W might be a bit broad. I'd replace it with a character set like this: [-+_!@#$%^&*.,?] (feel free to add more of course!)

32
votes

Bart Kiers, your regex has a couple issues. The best way to do that is this:

(.*[a-z].*)       // For lower cases
(.*[A-Z].*)       // For upper cases
(.*\d.*)          // For digits
(.*\W.*)          // For symbols (non-word characters)

In this way you are searching no matter if at the beginning, at the end or at the middle. In your have I have a lot of troubles with complex passwords.

6
votes

You can match those three groups separately, and make sure that they all present. Also, [^\w] seems a bit too broad, but if that's what you want you might want to replace it with \W.