alphagov/sign-on-o-tron — comment on commit 6d03dccf498c3ccfce767cea944a188c4b636dda
File: app/models/user.rb line 17
By threedaymonk:

Space is not a number or a letter. Neither is `(`, `)`, `[`, `]`, `{`, `+`, `/`, `<`, `>`, … you get the point.

1. Change the message to "must contain one of `!@#$%^&*?_~-` at least twice".
2. Change the regexp to `/([^a-z0-9][a-z0-9]*){2,}/i`.