4 ms·
How do you "make sure" they've got strong passwords without compromising password security for those people? Do you just have their word, hear them press many k
by mobiplayer 12y ago
How do you "make sure" they've got strong passwords without compromising password security for those people? Do you just have their word, hear them press many keys when authenticating, ...?
- falcolas 12y agoIn our case, we run the widely available password cracking tools and rainbow tables against our stored passwords. If we can get them, those users are notified and their passwords reset. Yes, we leave any salts and hashes in place - it limits the checks we can reasonably make to the usual password lists but it still catches a large number of poor passwords.