News for hackers. Stuff that matters.

A comment on Finally: A usable and secure password policy backed by science. Parent comment

Re:Finally: A usable and secure password policy backed by sc... by tzs on Saturday November 07, 2020 @11:56PM (#25023143)
It withdraws those suggestions if you make it long enough. For example, "horsecardoghousemailglassplate" has no improvement suggestions, but until that final "plate" is added it says not to use words, and to add symbols and upper case.

Another example is "195884873718293401958657". Until that last 7 is added, it suggests avoiding dates (1958), repeating sections (1958), and having very common passwords (718293) is part of your password, but when that last 7 is added the suggestions go away.

[ Parent | on HN ]
Re:Finally: A usable and secure password policy backed by sc... by Aeolun on Sunday November 08, 2020 @04:41AM (#25024449)
Doesn’t it just give up on giving you suggestions after a certain size?
[ Parent | on HN ]
Re:Finally: A usable and secure password policy backed by sc... by tzs on Sunday November 08, 2020 @08:50AM (#25025803)
In my first example the suggestions stop at character 30. In my second example the suggestions stop at character 24. For a password that is all ‘a’s they stop at character 68.

I’d guess it stops making suggestions when it reaches a certain estimated strength. The suggestions are ways to reach that strength efficiently.

[ Parent | on HN ]