CODEWITHSUNDEEP
passwords
Ian Warburton
Ian Warburton

Reputation: 15666

How do I implement these strong password requirements?

Upvotes: 1

Views: 100

Answers (2)

mortb
mortb

Reputation: 9839

If you inspect the code of http://howsecureismypassword.net you can see that the password is compared to a large array of usual passwords.

On the page threre is a reference to the page http://xato.net/passwords/more-top-worst-passwords/ which lists the top 10.000 most common passwords.

One approach would be to download that list and check the users passwords against it or at least some top 100 of them.

Upvotes: 1

zmbq
zmbq

Reputation: 39013

Well, first you need to define exactly what you want. What are keyboard patterns? Is 'jk' a keyboard pattern, or just 'jkl'? What's the shortest pattern there is? Is 'gy' a pattern? First you need to define what a pattern really.

Then you should make a list of all the available patterns (There aren't all that many. You have 36 starting points and 4 directions to go from each starting point). When you get a password, try to locate each of the patterns in it. Note that if you decide the shortest pattern is 3 letters long, you don't need to search for 4-letter patterns, all 4-letter patterns already contain 3-letter patterns.

As for words, that's easier, but first you need to make a list of all disallowed transformations ($->S, 1->i, etc...). Once you get a word, apply all the transformations and get yourself a 'normalized' word. Compare the normalized password against a dictionary of all legal words twice - the second time reverse the password.

You will probably need to do something a little more complicated than that, because you need to ignore numbers at the end of the word - sometimes. 1ncredible can be a substitute for 'incredible', although ncredible is not a word.

Upvotes: 1

Related Questions