dropbox / dropbox/zxcvbn

User input permutation suggestions

Open
#201 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
CoffeeScript
Stars
16.1k
Forks
1k
PR merge metrics
No merged PRs in 30d

Description

If I call `zxcvbn('1 am a unic0rn', ['I am a unicorn'])` the score is correctly calculated as 0, but there are no suggestions or warning for the user.
I would add something like "Permutations of personal data are NOT strong passwords"

Contributor guide

No contributing guide indexed for this repository

Research direction

Start at the zxcvbn entry point and trace how the supplied user-input list is matched against the password. Use the example `zxcvbn('1 am a unic0rn', ['I am a unicorn'])` as the initial case; done means permutation matches produce a user-facing warning or suggestion and the behavior is covered by tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
coffeescript
Domain
security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.