https://github.com/johannesbuchner/passwordtopologies
Common Password Topologies
https://github.com/johannesbuchner/passwordtopologies
Last synced: 7 months ago
JSON representation
Common Password Topologies
- Host: GitHub
- URL: https://github.com/johannesbuchner/passwordtopologies
- Owner: JohannesBuchner
- Created: 2015-09-12T15:37:52.000Z (about 10 years ago)
- Default Branch: master
- Last Pushed: 2015-09-13T16:42:49.000Z (about 10 years ago)
- Last Synced: 2025-01-23T20:51:41.672Z (9 months ago)
- Language: Python
- Size: 371 KB
- Stars: 1
- Watchers: 3
- Forks: 2
- Open Issues: 0
-
Metadata Files:
- Readme: README.rst
Awesome Lists containing this project
README
Commonly used password topologies
===================================
Some patterns of passwords are extremely common,
for example Denver14 follows the pattern Ullllldd
where
* u=uppercase
* l=lowercase
* d=digit
* s=special (other character)
Risk
-----
* Password crackers can search the most common patterns systematically (and do already).
* Users who use these common patterns are thus at risk.
Therefore, to increase security of your system you should not allow
users to choose passwords following these patterns!
This project identifies the most common password topologies.
See the `Report `_
Actions
---------
* Additional to the other OWASP recommendations (see below).
* When users set their passwords, check if that password is in a common topology.
* Encourage users to set pass-phrases, not passwords, and allow long passwords.
References
---------------
* `Pathwell Topologies `_
* `OWASP Security Guidelines `_