Fix #22 - Increase recovery codes entropy

samdjstevens / java-totp

A java library for implementing Time-based One Time Passwords for Multi-Factor Authentication.

MIT License

448 stars 109 forks source link

Closed OlivierJaquemet closed 4 years ago

OlivierJaquemet commented 4 years ago

Change code generation :

use a larger set of characters, yet still simple to read/enter : numbers and lower case characters from latin alphabet (for a total of 36 possible characters)
increase code length, from 10 to 16
continue to split code in groups, separated with dashes

Update unittest accordingly.

Update documentation with details on generated code format like "mwh1-7mx0-3ly9-9whn"

samdjstevens commented 4 years ago

Looks good, thanks!