Skip to content

Replace dictionary with a check against every published password #41

@indirect

Description

@indirect

I love the idea behind this library! I saw your todo of increasing the dictionary check, and realized that it lines up pretty closely with the work I did for my own gem, unpwn. Because dictionaries are too slow (and too big), I created a bloom filter from the top 1 million most common passwords that only takes up a few megabytes but has very good accuracy.

If a network connection is available, unpwn can also check the haveibeenpwned.com API to validate that the chosen password has never been included in any breach, ever.

Let me know if you have any questions, or there's something I could change about unpwn to make it easier for you to use to augment your dictionary check!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions