3 ms·
Password length and complexity aren't all that critical if it's salted and hashed. Unless your users' passwords are something like "password" or their user nam
by cantankerous 14y ago
Password length and complexity aren't all that critical if it's salted and hashed.
Unless your users' passwords are something like "password" or their user names. Password length and complexity are important, if overplayed.
- eksith 14y agoAh yes, well... if they're using 'password' for the password, they've got bigger problems ;) Passwords that can be guessed in 1-3 tries should be excluded, naturally: password, 12345, 11111 etc... But mixed case, special character stuff is a bit redundant.
- mergy 14y agoPretty sure the issue I had to deal with was related to the Java OSX exploit. That being said, it is a total trade-off vs. security or ease of use for the end-users.