dropbox / zxcvbn

Low-Budget Password Strength Estimation
https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/wheeler
MIT License
15.11k stars 942 forks source link

leetspeak dictionary does not catch 8 = B #79

Closed Terebi42 closed 9 years ago

Terebi42 commented 9 years ago

Trou8ador! is given a score of 2, entropy of 33

lowe commented 9 years ago

8->b actually is recognized by the l33t matcher already. The issue is "Troubador" is an uncommon spelling -- "Troubadour" does appear in zxcvbn's dictionary.