search

palant / pfp

A simple and secure browser extension to be used with KeePass databases.
https://pfp.works/
Mozilla Public License 2.0
113 stars 14 forks source link

Master password security isn't verified #2

Closed palant closed 8 years ago

palant commented 8 years ago

Currently, there is only a length requirement for the master password - at least 6 characters. Given that master password security is essential, there should be at least an indicator recommending more seucire passwords when the master password is set.

palant commented 8 years ago

I looked into a bunch of password meters and most of them use a rather stupid approach, not really suitable for estimating password entropy properly. https://github.com/dropbox/zxcvbn/ however seems to do a good job, I guess that's what I will use.

Downside is: this library adds 400 kB to the download size!