2 ms·
>>> if the passwords have enough entropy. Allow me to optimize your statement. >>> if False
by user5994461 8y ago
>>> if the passwords have enough entropy.
Allow me to optimize your statement.
>>> if False
- anticensor 8y agoWhat does it mean? Users always pick low-entropy passwords?
- judge2020 8y agoAlmost always. It's gotten better with the rise of password managers that generate random passwords, but otherwise, passwords are usually shared across many websites and usually less than 16 characters.
- rmc 8y agoNot "always". But you should not build your systems based on the assumption that passwords will be strong enough.
- topkeks 8y agoDon't allow shitty passwords. For example you could use HaveIBeenPwned API to reject previously leaked passwords.