• pirat@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    11 months ago

    I think I agree, but short passwords like “x”, “69”, “420”, “abcd”, “12345” etc. would take a very short time to brute-force… Is your take that even if these are allowed, it will make all other passwords of the site more secure, since it adds more possibilities to the list where nothing can be disregarded when trying to brute-force any other password?

    • ItsMeSpez@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      11 months ago

      Yes that’s exactly it. When you reduce the total space of possible passwords you are giving a brute force attack unnecessary hints to improve their attempts with. A weak password will always be a weak password, so single digits or obvious or popular patterns should be avoided, but this should be a matter of user education rather than a hard and fast rule for account creation.