4 ms·
As far as I am aware if you have the caps lock on, it doesn't care, so caps inverted passwords still work. I'm not sure about other variations.
by moocowduckquack 13y ago
As far as I am aware if you have the caps lock on, it doesn't care, so caps inverted passwords still work. I'm not sure about other variations.
- tommoor 13y agoOf course, this doesn't require plain text storage of the password.
- moocowduckquack 13y agoTrue, I was just pointing out that they do allow for some basic spelling errors.
- Dylan16807 13y agoThat doesn't count as a spelling error. It only adds one bit of entropy. What matters is if they have anything that lets you hit the wrong key.
- eloisius 13y agoThat's a lot easier than telling you about minor typos in your password. You just store two hashes: one of the password and one of its inverted case.
- Dylan16807 13y agoWhy would you store two versions? Just hash the password you were given twice.
- eloisius 13y agoThat's what I said: hash both the password and it's case-inversion. Did you mean something else?
- refucktoring 13y agoI think: hash the original version only, then when trying to log in, try both case-as-is and then flipped case
- eloisius 13y agoAh. Duh.
- deleted 13y ago[deleted]
- gte910h 13y agoCapslock, normal, and first letter capitalized (iphone mode)