Password rules - Githubissues

Wilsonator123 / Secure-Blog-Page

DSS Projecy

1 stars 0 forks source link

Password rules #51

Open Sleepy-Git-User opened 4 months ago

Sleepy-Git-User commented 4 months ago

Currently any password can be submitted as long as whats given isnt empty. So I think we should do a little research and set some rules. Such as length, no repeating numbers or in series numbers. We could also check it to a list of common bad passwords.

Lets have a talk and decide what rules we want, and how we want to enforce them.

Wilsonator123 commented 4 months ago

tl;dr article below

[x] Length req 8-64
[x] Allow Copy and Paste
[x] No hints or prompts for passwords
[x] Check password against blacklist (Dictionary, 10,000 most used password, repeat characters)
[x] Have a 'show password' option
[x] Password strength meters
[ ] No other complexity reqs Do we agree?

Wilsonator123 commented 4 months ago

image

Wilsonator123 commented 4 months ago

https://zxcvbn-ts.github.io/zxcvbn/ https://haveibeenpwned.com/ Xato Net Common Password List Okta Common Password List

Wilsonator123 commented 3 months ago