3 ms·
If the passwords are stored using proper key stretching techniques and salting, they don't need to have much entropy to withstand brute-forcing. It's not necess
by Confusion 14y ago
If the passwords are stored using proper key stretching techniques and salting, they don't need to have much entropy to withstand brute-forcing. It's not necessarily a problem that lowercase letters do not contribute. However, it is a completely unnecessary lowering of entropy.
My lesson from this is: it always pays to think about and understand even the seemingly most trivial decision. You may be stuck with it for decades.