Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
infavorites:1234
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with Search options user 655

A set of requirements regarding password creation, storage, and usage. These requirements often constrain several characteristics of passwords. So, a password policy is a set of rules designed to enhance computer security by encouraging users to employ strong passwords and use them properly.

3
votes
No, the order in the second password is NOT "more random". Randomness is not in the password itself, but in the way the password is generated; it does not relate to what the password is, but to what i …
answered Aug 12 '14 by Thomas Pornin
2
votes
Why do you have a password policy in the first place ? It is to avoid passwords which are "too weak" (in the sense of: "too easily guessed"). Do weak passwords suddenly cease to matter on the Web site …
answered Oct 12 '11 by Thomas Pornin
5
votes
If the connection string can be generated from the license key, then I suppose that each customer will have his own license key, resulting in a distinct per-customer connection string... so you are ba …
answered Feb 11 '13 by Thomas Pornin
14
votes
To remember passwords, type them often. You can remember dozens of passwords if you type them daily -- that's muscle memory, the same kind which is used by martial arts practitioners, so remembering m …
answered Oct 14 '12 by Thomas Pornin
12
votes
There are two levels of strength here: Whether the provided password will be, by itself, strong (against brute force). Whether someone learning one of your passwords on one site will gain leverage f …
answered Oct 24 '13 by Thomas Pornin
4
votes
With mathematics: Suppose there are n possible passwords. Password number i has probability pi of being selected. It is assumed that the attacker knows the exact values of the pi and tries them in du …
answered Aug 22 '12 by Thomas Pornin
10
votes
Unix passwords, with the old DES-based crypt() function, were limited to 8 characters (and the high bit of each byte was ignored). Thus, a lower limit of more than 8 characters would simply not have w …
answered Dec 16 '13 by Thomas Pornin
4
votes
A PIN is just a password -- a password which is restricted to digits and constrained in size, but a password nonetheless. PIN make sense in contexts where digits are natural, namely ATM systems and ot …
answered Oct 3 '12 by Thomas Pornin
10
votes
It is not bad to leave passwords live long. However, some people consider that password renewal is important and improves security. In all honesty, I am a bit at a loss when it comes to understanding …
answered Sep 24 '12 by Thomas Pornin
10
votes
The theory is that you would like to run the same tools as the attacker. The attacker will run a list of "probable passwords" based on what he knows or guesses of the psychology of the users. John the …
answered Feb 1 '13 by Thomas Pornin
2
votes
Part of it is a jerk reflex -- password reuse is forbidden because otherwise users can easily work around policies that force regular password changes. Not that forcing password changes really improve …
answered Mar 31 '16 by Thomas Pornin
1
vote
Who is responsible is who will get the blame. It is a policy decision, so it can be "anybody". However, bad decisions can happen. Here is some food for thought: Developers themselves must not be res …
answered Nov 1 '12 by Thomas Pornin
2
votes
One basic answer is that a password with 60 bits of entropy is enough -- that's about ten alphanumeric characters (chosen randomly, independently and uniformly, please). For such a password to be prac …
answered Dec 27 '12 by Thomas Pornin
10
votes
"Reading aloud" is about enunciating a sequence of "phonetic symbols" in due sequence. You want these symbols to be unambiguous when pronounced. It so happens that we humans have such a system: it is …
answered Aug 7 '13 by Thomas Pornin
5
votes
For n-character passwords without two identical adjacent characters, @Stephen gives the solution: that's 94*93n-1 passwords. Reasoning is simple: you are free to use any of the 94 characters for the f …
answered Apr 8 '14 by Thomas Pornin

15 30 50 per page