| |||||||||||||
Enforcing password strengthEnforcing password strengthPosted Oct 13, 2011 9:29 UTC (Thu) by k8to (subscriber, #15413)Parent article: Enforcing password strength
I don't like trying to create passphrases for random sites, because I have no way to easily test how much of the input is actually used. A lot of old or naive password systems ignore everything beyond the first N characters.
(Log in to post comments)
Enforcing password strength Posted Oct 14, 2011 7:20 UTC (Fri) by Cato (subscriber, #7643) [Link]
It's still a lot better to try to use a 12-character random password with punctuation etc, even if only 6 or 8 characters are used, than to use a fixed password. If the site does have weaknesses, only that one password is compromised.
Enforcing password strength Posted Oct 14, 2011 12:27 UTC (Fri) by robbe (guest, #16131) [Link]
Why not try to login with your passphrase minus the last character? This will catch chopping-of at any length from 1 to N-1 characters. If you get in this way, complain to the admin and/or never use the service again.
Password chopping to anything less than 100 characters means one or more of the following:
|
|||||||||||||