3 ms·
Yes, it is simple, yet elegant solution to the common password problems. I would also add check against common patterns (numbers or letters in increasing/decrea
by kbart 10y ago
Yes, it is simple, yet elegant solution to the common password problems. I would also add check against common patterns (numbers or letters in increasing/decreasing order or keys subsequent in keyboard etc.) to this, so you can't use "password1239" instead of "password123" and call it a day.
- bloaf 10y agoI'd say to just treat any of the common passwords as a single character when validating. If "password" was treated as a single character, then password123 would only count for 4 characters. It might be tough to explain to users, but it would solve the problem.
- AstralStorm 10y agoDon't worry, we will find a way around that stupidly draconian rule by making it not look like a word. For reference, common English dictionary words have about 24-bit entropy, a character has some 6 bits.