Password fields are represented using a custom data type. In some Relate Script system messages, the type will be referred to by the generic data type name, Object. Some messages will refer to the more specific data type name, Password. A Password value is never null; however, it may be empty. This condition can be determined via its custom fields. When a Password value is cast to String it results in the hash value of the password. A Password value has three read-only fields detailed below.  Since password fields can only be edited by BlueStep client care staff, you must contact BlueStep if you want a formula id added to the password field.

Field/Function Name Description
hash This is a String value containing a secure hash of the password.  The system adds several "salt" values while computing the hash.  This causes the hash to be unique to both the current user account and the actual password value.  Thus, it is not possible to compare hashed passwords between users, but for any paricular user the same password will always result in the same hash value. This is a read-only field.
strength This is a Float value containing the bit-strength of the password.  The bit strength is a measure of how difficult it might be to crack a password by random guessing without any information about the user who chose the password.  The bit strength is generated by a proprietary technique developed by BlueStep.  It takes into account the length of the password, the types of characters the password contains (numbers, letters, upper-case, symbols, etc.), simple sequences (such as aaa, abcd, 9876), and the presence of complete English words.  Using more characters from a broader pallette of symbols increases the bit strength while simple sequences and words contribute much less to the bit strength.  BlueStep recommends a minimum bit strength of 22.  A greater bit strength is needed as the value of the data secured within the system increases.  This is a read-only field.  NOTE: The minimum allowable bit strength may be customized for each organization.  However, it only effects new passwords as they are entered.  It is also possible to force existing users to change their password if it is too simple.  Contact BlueStep client care for information if you need either of these features.
lastChanged This is a DateTime field indicating the last time the password was changed. BlueStep began tracking password changes in September of 2013. Passwords set prior to this time make a worst-case assumption that the password has not been changed since the account was created.  This is a read-only field.