4 ms·

Doing this reduces way more the space of characters and reduces security.

• freemint 5y ago
  It reduces the password strength by at most two bits. For passwords made solely of non letters there is no reduction in password strength.
  • nitrogen 5y ago
    It's one bit per alphabetic character, isn't it?
    • smrq 5y ago
      No, it's only one bit for the first character and one for the second. The case of every other character is maintained relative to the second character, so the parity there provides the one bit of information for each subsequent alphabetic character.
      • nitrogen 5y ago
        Whoops, I didn't notice that the two L's were still capitalized in the normalization example a few comments up.
      • freemint 5y ago
        *and one for the caps lock key
• remram 5y ago
  It reduces the space of passwords just as much as having the backend try those same combinations for every query.