5 ms·
Cue a test-how-strong-your-password-is service where security conscious individuals can test how their particular password stands up against these new attacks.
by oskarth 13y ago
Cue a test-how-strong-your-password-is service where security conscious individuals can test how their particular password stands up against these new attacks.
- anonymouz 13y agoAnd have their password added to a word-list.
- roryokane 13y agoThere is a site that pretends to do just that, though I can’t find its URL. It asks you to enter your password for strength checking, then takes you to a page saying “estimated strength: 0. Because you have typed the password into an untrusted web page, you must assume it is compromised.”
- JDGM 13y agoHas anyone found this? It sounds great, but I couldn't get a URL from googling the obvious stuff. Please post if you know it!
- croikle 13y agohttp://www.inutile.ens.fr/estatis/password-security-checker http://www.inutile.ens.fr/estatis/password-security-checker The Terms and Conditions are worthwhile, too. EDIT: Also, see http://www.ismytwitterpasswordsecure.com/ http://www.ismytwitterpasswordsecure.com/ (needs Javascript)
- JDGM 13y agoSuperb. Thanks!
- roryokane 13y agozxcvbn (https://dl.dropboxusercontent.com/u/209/zxcvbn/test/index.html https://dl.dropboxusercontent.com/u/209/zxcvbn/test/index.ht..., https://github.com/lowe/zxcvbn https://github.com/lowe/zxcvbn) basically has this aim. It might be missing some patterns exploited in attacks, but it’s extensible enough that they shouldn’t be too hard to add.
- JDGM 13y agoIt's not really what you described, but this is quite jolly: https://howsecureismypassword.net https://howsecureismypassword.net.
- fencepost 13y agoLastPass includes a "security check" that does some level of checking, but they don't appear to provide details on their "strength of your password" check - it runs in the browser so presumably they're only doing some low-level checks.