The score thresholds in generateFeedback() are still up to tweaking. This is currently without bonus bits, which can be as much as 32 without a dictionary check.
Also up to change what suggestions to include based on scoring. Entropy is mainly based on length and charset size, so I'm not sure what other relevant suggestions could be given
The score thresholds in generateFeedback() are still up to tweaking. This is currently without bonus bits, which can be as much as 32 without a dictionary check. Also up to change what suggestions to include based on scoring. Entropy is mainly based on length and charset size, so I'm not sure what other relevant suggestions could be given
EDIT: Found a more reliable source expressing the same bit thresholds for strength classifications: http://iocane.com.au/talking-passwords-and-entropy/#:~:text=The%20strength%20of%20a%20password,as%20well%20as%20password%20length.&text=in%20the%20password%20itself.