duffn/dumb-password-rules

Jetbrain, Have some interesting ones.

Daniel3356 opened this issue · 2 comments

Daniel3356 commented

Jetbrain, Have some interesting ones but it's animated,
https://account.jetbrains.com/signup-complete

  1. The password must contain at least 8 characters.
  2. Repeats like "aaa" are easy to guess:
    • Avoid repeated words and characters.
    • Add another word or two. Uncommon words are better.
  3. This password is easy to guess:
    • Add another word or two. Uncommon words are better.
Daniel3356 commented

use combination qwertyuiop to get the message «This password is easy to guess»

depperm commented

#1 seems like a fine rule, and #3 is if your password is a dictionary word. qwertyuiop being rejected is also fine. #2 IMO is dumb, but NIST 600-63B 5.1.1.2 does recommend against repeated words/characters (though the example has 6 not 3)