The Little Guy Posted April 3, 2007 Share Posted April 3, 2007 Anyone have any Ideas what to search for in a password to check to tell a user how secure there password is? Link to comment https://forums.phpfreaks.com/topic/45363-password-security/ Share on other sites More sharing options...
pocobueno1388 Posted April 3, 2007 Share Posted April 3, 2007 The longer, the better Having a mix of numbers and digits is better Hmmm, that is all I can think of for now. That is the obvious though, haha. Link to comment https://forums.phpfreaks.com/topic/45363-password-security/#findComment-220270 Share on other sites More sharing options...
The Little Guy Posted April 3, 2007 Author Share Posted April 3, 2007 here is what I have so far: http://tzfiles.com/testing/chkpass.php 100 is supposed to be perfect or 100% Secure... What do you think? Link to comment https://forums.phpfreaks.com/topic/45363-password-security/#findComment-220275 Share on other sites More sharing options...
per1os Posted April 3, 2007 Share Posted April 3, 2007 Your best defense is only allowing a user to enter a password 3 times before it locks them out for 30 minutes. Either way generally 8-12 characters with a mixture of upper/lower numbers and at least 1 special character IE: m0unT4inM4N! Would take a long time to break. Link to comment https://forums.phpfreaks.com/topic/45363-password-security/#findComment-220280 Share on other sites More sharing options...
dough boy Posted April 3, 2007 Share Posted April 3, 2007 I would assign more "weight" to symbols and numbers. Every character I typed in after 4 earned just 10 "points" Link to comment https://forums.phpfreaks.com/topic/45363-password-security/#findComment-220285 Share on other sites More sharing options...
The Little Guy Posted April 3, 2007 Author Share Posted April 3, 2007 Done, Just the numbers... How would I do symbols??? This is how I did numbers: <?php $pasa = str_split($pas); foreach($pasa as $let){ if(preg_match("~^[0-9]$~",$let)){ $secure += 20; } } ?> Link to comment https://forums.phpfreaks.com/topic/45363-password-security/#findComment-220305 Share on other sites More sharing options...
Daniel0 Posted April 3, 2007 Share Posted April 3, 2007 100 is supposed to be perfect or 100% Secure... What do you think? Technically you cannot have a 100% secure password. It is just a matter of time and computational power before it can be cracked. You could start with a basic score, then add points to the score based the the following things: - length - contains a-z? - contains A-Z? - contains 0-9? - contains special characters (all other than a-zA-Z0-9)? - contains words in a dictionary (deduct points)? - contains reversed words in a dictionary (deduct points)? - contains patterns on keyboard - e.g. qwerty (deduct points)? Link to comment https://forums.phpfreaks.com/topic/45363-password-security/#findComment-220433 Share on other sites More sharing options...
monk.e.boy Posted April 3, 2007 Share Posted April 3, 2007 Why bother? It's not your problem. If you end up telling someone their password is 100% amazing, then it is cracked 20 minutes later, can they sue you for one million US bucks? It's up to the user to type in something secure. What they type is nothing to do with you. monk.e.boy Link to comment https://forums.phpfreaks.com/topic/45363-password-security/#findComment-220451 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.