2 ms·
Isn't best practice to: 1) have a minimal password length 2) check all passwords against a set of known bad passwords I don't see a decent way to do 2) based
by rocqua 9y ago
Isn't best practice to:
1) have a minimal password length
2) check all passwords against a set of known bad passwords
I don't see a decent way to do 2) based on a backtracking RE engine.
- chrismorgan 9y agoIt’s a terrible approach, but it is easily feasible. Here’s a simplified pattern that forbids “password”, “123”, “1234”, “12345” and “123456”: (?!password$)(?!123(?:4(?:56?)?)?$).*