Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Replace dictionary with a check against every published password #41

Open
indirect opened this issue Jan 29, 2022 · 0 comments
Open

Replace dictionary with a check against every published password #41

indirect opened this issue Jan 29, 2022 · 0 comments

Comments

@indirect
Copy link

I love the idea behind this library! I saw your todo of increasing the dictionary check, and realized that it lines up pretty closely with the work I did for my own gem, unpwn. Because dictionaries are too slow (and too big), I created a bloom filter from the top 1 million most common passwords that only takes up a few megabytes but has very good accuracy.

If a network connection is available, unpwn can also check the haveibeenpwned.com API to validate that the chosen password has never been included in any breach, ever.

Let me know if you have any questions, or there's something I could change about unpwn to make it easier for you to use to augment your dictionary check!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant