News for hackers. Stuff that matters.

A comment on Ricky Mondello » Apple Passwords' Generated Strong Password Format.

Re:Ricky Mondello » Apple Passwords' Generated Strong Passwo... by pdxpatzer on Friday October 18, 2024 @12:20PM (#41880856)
question: would it be possible/smart to have a system where the entity that is authenticating you has a way to disclose to you the maximum password complexity that it can handle ? Something like a GeekCode string that you can feed to your password generator and come out with a the strongest password possibly handled by the system ?
[ Parent | on HN ]
Re:Ricky Mondello » Apple Passwords' Generated Strong Passwo... by madeofpalk on Friday October 18, 2024 @03:06PM (#41882457)
Apple/OP actually maintains a list of crowdsourced password rules for websites https://github.com/apple/password-manager-resources/blob/mai...
[ Parent | on HN ]
Re:Ricky Mondello » Apple Passwords' Generated Strong Passwo... by kergonath on Saturday October 19, 2024 @07:56AM (#41887317)
On one hand it’s terrible that they have to do this. On the other, in terms of attention to detail and user experience it’s great.
[ Parent | on HN ]
Re:Ricky Mondello » Apple Passwords' Generated Strong Passwo... by sureIy on Friday October 18, 2024 @12:26PM (#41880919)
I think we just moved to Passkeys for that.
[ Parent | on HN ]
Re:Ricky Mondello » Apple Passwords' Generated Strong Passwo... by 0xbadcafebee on Friday October 18, 2024 @12:53PM (#41881211)
Yeah, actually, that would work fine. But the people who maintain the login pages don't update their complexity rules right half the time, so the geekcode would go out of date quickly, and you'd end up spitting out invalid passwords, and people would stop using it
[ Parent | on HN ]
Re:Ricky Mondello » Apple Passwords' Generated Strong Passwo... by ttepasse on Friday October 18, 2024 @05:34PM (#41883712)
Apple some years ago proposed a string format for password rules – to be used in password managers and also an HTML attribute for that:

  <input type="password" passwordrules="minlength: 8; maxlength: 12; required: lower; required: upper; required: digit; required: [-];">
It seems implemented in Safari and UIKit, but I can’t find any implementation documentation for other brothers. Sad.

https://developer.apple.com/password-rules/

https://developer.apple.com/documentation/security/customizi...

[ Parent | on HN ]