4 ms·

You are right, but given the fact that most people still use very common words for their passwords, a 3 times increase is a very huge number. A recent story on

by heroic 14y ago

You are right, but given the fact that most people still use very common words for their passwords, a 3 times increase is a very huge number. A recent story on HN stated the fact that passwords from sites that had their databases leaked, mostly consisted of dictionary based passwords.

FuzzyDunlop 14y ago
One could posit that the negative security impact on such a password is negligible, since the password is already weak. I think it would be worrisome if there weren't protective measures already in place, such as limited login attempts, two-factor auth, and so on. The other weakness would be the repetition of that password on sites that place a low priority on, or are ignorant about, security. At which point, it doesn't even matter.