Fedora's invisible passwords and visible squabbles
Fedora's invisible passwords and visible squabbles
Posted May 9, 2013 17:58 UTC (Thu) by intgr (subscriber, #39733)In reply to: Fedora's invisible passwords and visible squabbles by mitr
Parent article: Fedora's invisible passwords and visible squabbles
> I think it's exactly the other way around: systems should lock users out, at least for some time, on incorrect attempts; if they do, the passwords can be much shorter and easier to enter.
I think the most sensible thing to do is requiring a CAPTCHA after a few wrong attempts. It will keep out most bots and slow down human guessers, while just being a small hassle for legitimate users.