search

TilBlechschmidt-ProjectGraveyard / BJS

Management system for the Bundesjugendspiele | CS Project for school
1 stars 1 forks source link

Don't use too long words for passwords #162

Open m-bra opened 7 years ago

m-bra commented 7 years ago

Example: "Bügeleisen4Sprechstundenhilfe" Is simply too long for a password. Just don't use words from the wordslist that are >6 characters.

TilBlechschmidt commented 7 years ago

Currently, passwords are limited to 8+4+8 symbols in total. The example password provided got generated with the old word-list. The problem with a letter count below eight is, that the entropy drops rapidly. Whilst there are about 4000 words @ eight letters there's only slightly below 1000 nouns for six letters. The possible fixes are:

  1. Keep the maximum length at 20 symbols or eight characters per word or
  2. Search for some more nouns that have got less than six characters
m-bra commented 7 years ago

|{1000 nouns} {4 digit-numbers} {1000 nouns}| = 10,000,000,000. We could search for more nouns, but I think ten trillion possibilities should be enough.