troyhunt / password-purgatory-api

This is the Cloudflare Worker public API for deliberately making password creation hell
Apache License 2.0
143 stars 41 forks source link

Include name #46

Open MichaelNMaggs opened 2 years ago

MichaelNMaggs commented 2 years ago

We all love "For security purposes", right?

"For security purposes your password must include your name".

Check against a name database and reject unless the new password includes at least one match.

BenBE commented 2 years ago

https://www.kalzumeus.com/2010/06/17/falsehoods-programmers-believe-about-names/