3 ms·
If you change the passcode from simple to complex and then set a 4-digit passcode it doesn't automatically try after you enter the 4th digit. It asks you to pre
by Evolved 12y ago
If you change the passcode from simple to complex and then set a 4-digit passcode it doesn't automatically try after you enter the 4th digit. It asks you to press OK. This means you could enter 4 digits but not know whether the passcode string length is 1 or 100 characters (includes all alphanumeric characters. Also, I'm just using an absurdly high number. I don't know what the max passcode length is.) before attempting to brute force it.
- rdl 12y agoIf you have an all-numeric passcode which isn't a "simple passcode", it doesn't display length, but does show only the numeric keypad, indicating to an attacker it's only numeric. I personally would rather enter a 12 digit numeric to an 8 character alphanumeric. (Also included 80 character full upper/lower with numbers and symbols, but this is unrealistic given how many keypresses are required for modifiers.) <PRE> 10^12 = 1000000000000 36^8 = 2821109907456 80^6 = 262144000000 80^7 = 20971520000000 At 10 Hz, the first two options get you 3000 to 10000 years. A reasonable lower bound, given 10Hz on the tries, is 10^9 = 100000000 36^6 = 60466176 80^5 = 40960000 47-90 days. </PRE>