4 ms·
If I enter the first 10 characters in regular order of my French azerty keyboard that are &é"'(-è_çà)= I get a top 4/4 score :). Not very good for security.
by patrickaljord 14y ago
If I enter the first 10 characters in regular order of my French azerty keyboard that are &é"'(-è_çà)= I get a top 4/4 score :). Not very good for security.
- miles 14y agoThe author of zxcvbn acknowledges this weakness (and others) here: https://tech.dropbox.com/2012/04/zxcvbn-realistic-password-strength-estimation/ https://tech.dropbox.com/2012/04/zxcvbn-realistic-password-s... zxcvbn currently only supports English words, with a frequency list skewed toward American usage and spelling. Names and surnames, coming from the US census, are also skewed. Of the many keyboard layouts in the world, zxcvbn recognizes but a few. Better country-specific datasets, with an option to choose which to download, would be a big improvement.