How To Correctly Validate Passwords - Most Websites Do It Wrong

submitted by wagslane from (qvault.io)

sorted by:
top
newinsightfulfun
you are viewing a single comment's thread.

view the rest of the comments →

[–]NerfgunBump 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (0 children)

This doesn't consider dictionary words. In other words, "spaghetti" is deemed to have exactly the same entropy as "hkwvqbrcg".

That's not right, especially since dictionary attacks are very common.