-
Notifications
You must be signed in to change notification settings - Fork 80
Description
TLDR:
123456 is pretty much the most common password in the world and also has no entropy due to being an obvious sequence.
zxcvbn-ts falls on it's face with onetwothreefourfivesix, rating it as maximum strength.
Let's fix that?
Just an idea, not sure if this is commonly done with passwords.
But just like 123456789 or 987654321 or abcdefg, etc is seen as completely lacking entropy... what about
Months
januaryfebruarymarch
julyjunemay
Written numbers
onetwothree
nineeightseven
Seasons
springsummerautumn
winterspringsummer
Bible chapters
genesisexoduswhatever etc
Sizes
smallmediumlarge
largemediumsmall
Greek whatever
alphabeta etc
Phonetic alphabet
alphabravocharliedelta
tangosierraromeo
zxcvbn-ts currently thinks all this sort of junk is a strong password (might need to add an extra word in some cases, but normally 3-4 words, and it thinks you're golden), when you've basically got no entropy if you're using any of the above.
Obviously there's an endless amount of common sequences people could put into a password.
Like listing the characters of a popular tv series.
But I figured the categories I wrote above should be standard, because regardless of a person's preferences or personality, they'll deal with (or be familiar with) most, if not all of the above. With the exception of maybe awareness of the bible chapter names.