In registration form, I have client side validation for strength of password. For example password should be not less than 6 symbols, consists at least 1 digit, and at least 1 letter.
dk43do are valid passwords, but
3242354 are not.
Is it normal to make such a validation in auth (log in) form too?
So, if user tries to log in, inputs a password, that is easy and can't be a password, it means - user had mistaken, so we should to tell him about it before he pressed