zxcvbn
zxcvbn copied to clipboard
Add extremely common word sequences?
TLDR:
123456
is pretty much the most common password in the world and also has no entropy due to being an obvious sequence.
zxcvbn-ts falls on it's face with onetwothreefourfivesix
, rating it as maximum strength.
Let's fix that?
Just an idea, not sure if this is commonly done with passwords. But just like 123456789 or 987654321 or abcdefg, etc is seen as completely lacking entropy... what about
Months januaryfebruarymarch julyjunemay
Written numbers onetwothree nineeightseven
Seasons springsummerautumn winterspringsummer
Bible chapters genesisexoduswhatever etc
Sizes smallmediumlarge largemediumsmall
Greek whatever alphabeta etc
Phonetic alphabet alphabravocharliedelta tangosierraromeo
zxcvbn-ts currently thinks all this sort of junk is a strong password (might need to add an extra word in some cases, but normally 3-4 words, and it thinks you're golden), when you've basically got no entropy if you're using any of the above.
Obviously there's an endless amount of common sequences people could put into a password. Like listing the characters of a popular tv series.
But I figured the categories I wrote above should be standard, because regardless of a person's preferences or personality, they'll deal with (or be familiar with) most, if not all of the above. With the exception of maybe awareness of the bible chapter names.