Tag Info

New answers tagged

0

You give an easy way to check the most common password on your database, this seem to me like a really bad practice. Let imagine someone find 5 passwords this way, he know he is capable to open 1/200 account in less than five try ( if he can guess the username of other account). You want to prevent a problem by you just simplify the attack by common ...


5

I'm assuming here that your goal is (as @owen suggests) to stop the use of common passwords (e.g. password123) used by your userbase. This is generally a "bad thing" for security as you'll be artifically constraining password choice in a way that is unpredictable to the user. If you think about the end-user experience of this feature, would you give them ...



Top 50 recent answers are included