Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

No, you forcing me to include a number does not make my password more secure.

Weak password: correcthorsebatterystaplefoobarbaz

Strong password: password1

The worst is when they do that and enforce a maximum password of 8 or 12 characters (I'm looking at you, every bank in the US ever).



Is the top password not stronger than the bottom one in your example?


That was his point. Web services incorrectly classifying the strength of user supplied passwords.


The labels ("strong", "weak") are ironic.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: