Enforcing strong passwords in Known
Using NIST entropy calculations to enforce a minimum Known password strength.
This is just a quick post to nudge you towards a little plugin I wrote for Known which enforces a minimum password strength for user passwords.
The plugin works by calculating the entropy of the password based on NIST recommendations, and rejecting passwords where the entropy is too low.
By default, the minimum entropy is 44, however this can be changed through a configuration setting.
For this plugin to work, until my pull request is merged into the core code, you’ll need to apply patches available from my password validation branch.
Anyway, give it a kick about!
» Visit the project on Github...
Image “Password Strength” by XKCD
@mapkyca One note: that pull request was merged ages ago!