3 ms·
Either way, this is a password strength checker, sending just a hash to the server would be useless. Client-side password strength checker would make it functi
by Pxtl 10y ago
Either way, this is a password strength checker, sending just a hash to the server would be useless.
Client-side password strength checker would make it functionally impossible to check dictionaries.
- FabHK 10y agoSorry, as I keep saying in this thread, the excellent client-side password strength checking library zxcvbn (https://github.com/dropbox/zxcvbn https://github.com/dropbox/zxcvbn) is under 400 kB compressed including dictionaries, checking against "30k common passwords, common names and surnames according to US census data, popular English words from Wikipedia and US television and movies, and other common patterns like dates, repeats (aaa), sequences (abcd), keyboard patterns (qwertyuiop), and l33t speak" Thus, it is, as a matter of fact, quite possible to do reasonable password strength checking on the client side with a footprint that's a small fraction of many of today's ad-infested websites.