search

wagslane / go-password-validator

Validate the Strength of a Password in Go
https://blog.boot.dev/open-source/how-to-validate-passwords/
MIT License
500 stars 40 forks source link

10001010101010101001110101010101010101010101010101010101 should be secure #5

Closed wagslane closed 3 years ago

wagslane commented 3 years ago

So the password 1010101010101011101101000000010111011011101001010001001101011011 is calculated as only having a length of "2" and a base of 10. So it would be about 6 bits according to this. But the generation method clearly is generating a binary string with length 64, for a total of 64 bits of entropy.

wagslane commented 3 years ago

Changing the penalty to only take into account repeated characters next to each other