summary refs log tree commit diff
path: root/issues/prevent-weak-passwords.gmi
blob: 957a1704c918fb21a4b53dc3d1bb3150e6ac3e84 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
# Prevent Weak Passwords

## Tags

* status: open
* assigned: fredm
* priority: medium
* keywords: security, password, gn-auth
* type: feature-request, feature request

## Description

=> https://matrix.to/#/!mBYtTotZGiPpHmjJnI:matrix.org/$yaw0uk-JyHGBC8Jw-b2I1VhGoaWwNEO_eOiSAO8RSDs?via=matrix.org
> pjotrp
> how do we prevent weak passwords
> I don't think we need 2FA, but weak passwords are a bad idea
> do you check for weak passwords?

There was a request made to prevent weak passwords.

Use existing libraries to check and prevent weak passwords.

## Notes

### 2025-12-31: Look Into Libraries

=> https://pypi.org/project/password-strength/ password-strength

The library above seems promising. Unfortunately, we'd have to write a guix definition for it.