You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The zxcvbn library accepts an optional list of user inputs (e.g. username or email address). Providing this will prevent someone from setting weaker passwords than expected from a naive password evaluation.
The text was updated successfully, but these errors were encountered:
@fpbgg given we don't collect these sorts of values otherwise, is there another type of input we could use here in your mind?
markmhendrickson
changed the title
Provide email address to zxcvbn to minimize risk of weak passwords
Strengthen use of zxcvbn with additional input to minimize risk of weak passwords
Sep 14, 2023
https://github.com/leather-wallet/desktop/blob/c362a6675e25e701bfc80fdab84fe8c2354ec1a0/app/crypto/validate-password.ts#L25-L28
The zxcvbn library accepts an optional list of user inputs (e.g. username or email address). Providing this will prevent someone from setting weaker passwords than expected from a naive password evaluation.
The text was updated successfully, but these errors were encountered: