Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding "012" to any password makes it weaker #59

Closed
seriousmumbo opened this issue Feb 25, 2015 · 3 comments
Closed

Adding "012" to any password makes it weaker #59

seriousmumbo opened this issue Feb 25, 2015 · 3 comments
Assignees
Labels

Comments

@seriousmumbo
Copy link

The password strength drops whenever I add "012" to the end of a password.

Examples:

Simple password:
"goop33" = medium
"goop33012" = nill

Random 12 character:
"Fa2PmxBTTWzT" = strong
"Fa2PmxBTTWzT012" = normal
"012Fa2PmxBTTWzT" = weak
"Fa2012PmxBTTWzT" = normal
"Fa2PmxBTTWzTpassword" = very strong

Random 20 character:
"Nq4YGDQf3HJcXU3ZDsjv" = very strong
"012Nq4YGDQf3HJcXU3ZDsjv" = strong
"Nq4YGDQf3HJcXU3ZDsjv012" = very strong <-- doesn't drop if I add "012" anywhere past 7 chars
"Nq4Y012GDQf3HJcXU3ZDsjv" = strong

@ablanco
Copy link
Owner

ablanco commented Feb 25, 2015

012 makes the score to drop because it is a sequence, but it seems like the wordSequences needs some polishing so the scores are more consistent.

You can change the score associated to finding sequences, or even deactivate the rule if you don't like it.

@melanie
Copy link

melanie commented May 19, 2015

+1 - the sequence rules seem exceptionally aggressive; even flopping my hands willy-nilly on the keyboard for 30 characters produced "sequences" that make the password Weak, despite the practical impossibility of breaking such a password.

@ablanco
Copy link
Owner

ablanco commented May 23, 2015

I've changed the default score of the sequences rules, so it is not that aggresive.

Commit: 9d7aa00

@ablanco ablanco closed this as completed May 23, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants