search

jedi58 / inachis

Framework for creating simple websites
3 stars 1 forks source link

Disallowed password list #76

Open jedi58 opened 8 years ago

jedi58 commented 8 years ago

Don't allow passwords to use their username or common ones such as "letmein" or "Admin123"

jedi58 commented 8 years ago

Common passwords should not be detected - it has no value in dictionary based attacks. Making sure the username is not in the password though however is a valid check

jedi58 commented 4 years ago

Also look at https://symfony.com/doc/current/reference/constraints/NotCompromisedPassword.html