Hacker News new | ask | show | jobs
by dbarlett 4172 days ago
This is significantly more optimistic than Dropbox's zxcvbn [1]:

  Password                   hsimp                zxcvbn
  qwER43@!                   3 days               3 hours
  Tr0ub4dour&3               344 thousand years   22 hours
  correcthorsebatterystaple  A quintillion years  65 years
[1] https://github.com/dropbox/zxcvbn
1 comments

The plugin is actually based on newer code than the current HSIMP site so it would, for example, detect that "correcthorsebatterystaple" is going to get cracked straight away.

It's also fully customisable how many calculations per second you want to assume a cracker can make. It's set to 10 billion by default, but you could set it to much higher if you wanted.

The boundaries of what counts as "ok" and "good" passwords can also be customised.