EFForg
Investigate using a passphrase instead of password for the private network
Passphrase may be more secure (and likely more memorable) than password for the private network.
Opening issue to investigate implementation. Marking as UX b/c has implications for the web UI.
Per security.txt, we decided to auto-generate a Diceware passphrase as a suggestion, with the option to edit it.
Reopening to serve as the discussion thread for the UI of this feature.
Here's my suggestion, interested in feedback / alternatives:
-
Router does not restart wifi until all steps are complete.
-
setSSID.html asks you pick an SSID.
-
After entering the SSID prompt, the screen changes to say:
Your private network will be named MyNet. The passphrase for MyNet is: face weed roof chic [edit] Please write down this passphrase and store it someplace reasonably safe, such as underneath your router. You will be prompted to re-enter it on the next screen. [Continue]
-
Clicking the edit button replaces the default password with a text box containing the default password, with all of the text pre-selected.
-
Next screen (which will probably be implemented with JS, so it doesn't require a page navigation) has:
Confirm network passphrase Please re-enter the network passphrase for MyNet from the previous screen: [______]
[back] [save and restart]
-
The passphrase is not visible during confirmation, to ensure that the user has either written it down or memorized it. The user can go back / continue as many times as they like until they type the correct passphrase.
