Enforce strong password !!!

[patmast3r]

People do not understand brainwallets. They don't understand the neccessity of very strong passwords. Nano needs to enforce strong passwords.
Nobody reads the warnings and even if they do it is not being made clear to them how great the danger is.
How many more people are going to lose their XEM and then spread the word that NEM is insecure (which is obviously incorrect).

This needs to happen imho.
Alternatively drop the functionality for brainwallets entirely.

[jabo38]

I agree. Even though there is a strong warning, it doesn't matter, people are not following. I think maybe the min character should be 24 when making a passphrase? maybe longer?

[QuantumMechanics]

Okay, will be 24 characters minimum in next update

[mizunashi]

These two passwords are of equal intensity.

~UfC%Ghe&azRVv3
estop mixing edelweiss conduct rejoin flexitime

Both are pretty strong passwords with entropy of over 90.
log2((26 + 26 + 10 + 10)^15) = approx. 92.548875

[mizunashi]

There are 40 chars or more written in the warning.

If this is a character that can be used in Base64, if it is 40 characters, entropy will be amazing lol
Log 2 ((26 + 26 + 10 + 10) ^ 40) = 246, 797
Is it the orientation of words?

[patmast3r]

Awesome. I think this would warrant an emergency release tbh but at least it's coming.
24 chars isn't a lot though. It's already too long to remember for most so we might as well go all out with 40 as is suggested now or even more. Once they need to use a password manager it doesn't matter how many chars.

[mizunashi]

Again, big damage was made.
Discussions are also being held at NEM::RED.
It is better to issue a corresponding version as soon as possible.

Someone already using a short password with BrainWallet.
I think that the countermeasure here is also necessary.

[jabo38]

@QuantumMechanics please make the limit 40 characters as Pat suggests.

Anybody making a new wallet will have to use 40 or more characters.

Anybody with an existing brainwallet with less than 40 characters will be able to log in but will get a warning to upgrade their wallet to a new wallet with a passphrase with 40 or more characters.

[QuantumMechanics]

7631bba
2ecd959