This repository has been archived by the owner on Feb 9, 2020. It is now read-only.

Password strength shouldn't rely on rules other than entropy and a dictionary of common passwords #26

Open

andybak opened this issue Apr 28, 2017 · 0 comments

andybak commented Apr 28, 2017

Supporting rules such as "2 special characters" encourages bad practice and is pretty much security theater. Don't encourage it!

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.