Improve security: Optionally exclude predefined password-specific regex patterns, in an easy way

[Gitchiel]

Hi there, thank you for the great app!
One idea I had today: to create a user-friendly option, in order to exclude password-specific regex patterns - e. g. call the option something like: "Exclude typical password character patterns from being copied".

So of course the idea is, to to improve Maccy's security features... This option could be either active by default, with a checkbox to deactivate this if needed; or alternatively, the other way around of course (deactivate by default).
To be more specific: the patterns should at least more or less match, what companies often require (for new / updated passwords) - as well as the ones, which macOS-typical password-generators usually produce.
The 1st example below is a typical enterprise password rule (although rather strict in this case, you could change it to e. g. 12+ / 14+ characters), and the 2nd one is a typical "memorable" password example, consisting of at least 3 words, connected by special characters, so like for instance 1password produces.

Practically speaking, you could for instance exclude all words / memory entries, which contain the following character patterns (designed in a way, that it's highly improbable to "accidentally" meet those criteria with regular words):

• A word with at least 16 characters, containing at least two Upper case characters, 2 lower case characters, 2 numerical characters and one special character (without internal spaces of course, otherwise it'd be 2 words).
• A word with more than 2 Upper case characters + divider-sign + >2 lower case characters + divider-sign + >2 numeric characters (so in this case, with the character types being grouped together, to avoid false positives).

Using Regex, these 2 examples would be defined as:

• ^(?=(?:.[A-Z]){2})(?=(?:.[a-z]){2})(?=(?:.[0-9]){2})(?=.[^a-zA-Z0-9]).{16,}$
• ^[A-Z]{3,9}.[a-z]{3,9}.[0-9]{3,9}$

Of course, more patterns might need to be defined, in order for this to make sense. As far as I could see, this is saved in the defaults file as an array, so shouldn't be hard to define ± 10-20 variants of typical password patterns...

I think this would be a cool improvement, curious to get feedback,

BR Michele

[weisJ]

Maccy already provides the option to ignore copies based on regular expressions.

[Gitchiel]

I know, obviously (otherwise I wouldn't have known, where this is stored afterwards, so in macOS defaults, etc.). But it's pretty complex for most users... Esp. when you think of which patterns for passwords might make sense; of course you can either say: I don't care, their problem - but if you want to add user friendly options, to make this app safer, this would be a way - and it also saves a lot of time for people, who do know, how to use regex :-)