zxcvbn icon indicating copy to clipboard operation
zxcvbn copied to clipboard

Add extremely common word sequences?

Open softwarecreations opened this issue 3 years ago • 5 comments

TLDR: 123456 is pretty much the most common password in the world and also has no entropy due to being an obvious sequence. zxcvbn-ts falls on it's face with onetwothreefourfivesix, rating it as maximum strength. Let's fix that?


Just an idea, not sure if this is commonly done with passwords. But just like 123456789 or 987654321 or abcdefg, etc is seen as completely lacking entropy... what about

Months januaryfebruarymarch julyjunemay

Written numbers onetwothree nineeightseven

Seasons springsummerautumn winterspringsummer

Bible chapters genesisexoduswhatever etc

Sizes smallmediumlarge largemediumsmall

Greek whatever alphabeta etc

Phonetic alphabet alphabravocharliedelta tangosierraromeo

zxcvbn-ts currently thinks all this sort of junk is a strong password (might need to add an extra word in some cases, but normally 3-4 words, and it thinks you're golden), when you've basically got no entropy if you're using any of the above.

Obviously there's an endless amount of common sequences people could put into a password. Like listing the characters of a popular tv series.

But I figured the categories I wrote above should be standard, because regardless of a person's preferences or personality, they'll deal with (or be familiar with) most, if not all of the above. With the exception of maybe awareness of the bible chapter names.

softwarecreations avatar Jul 13 '21 09:07 softwarecreations