{"action":"created","issue":{"url":"https://api.github.com/repos/mozilla/api.webmaker.org/issues/178","labels_url":"https://api.github.com/repos/mozilla/api.webmaker.org/issues/178/labels{/name}","comments_url":"https://api.github.com/repos/mozilla/api.webmaker.org/issues/178/comments","events_url":"https://api.github.com/repos/mozilla/api.webmaker.org/issues/178/events","html_url":"https://github.com/mozilla/api.webmaker.org/issues/178","id":104118751,"number":178,"title":"Consider using password strength test instead of specific rules","user":{"login":"k88hudson","id":1455535,"avatar_url":"https://avatars.githubusercontent.com/u/1455535?v=3","gravatar_id":"","url":"https://api.github.com/users/k88hudson","html_url":"https://github.com/k88hudson","followers_url":"https://api.github.com/users/k88hudson/followers","following_url":"https://api.github.com/users/k88hudson/following{/other_user}","gists_url":"https://api.github.com/users/k88hudson/gists{/gist_id}","starred_url":"https://api.github.com/users/k88hudson/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/k88hudson/subscriptions","organizations_url":"https://api.github.com/users/k88hudson/orgs","repos_url":"https://api.github.com/users/k88hudson/repos","events_url":"https://api.github.com/users/k88hudson/events{/privacy}","received_events_url":"https://api.github.com/users/k88hudson/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-08-31T19:30:43Z","updated_at":"2015-09-14T19:09:24Z","closed_at":null,"body":"I was looking around validation stuff the other day and found https://github.com/dropbox/zxcvbn, which uses a bunch of rules that get converted into a generic indicator of password strength rather than a single rule set. The output looks like this:\r\n\r\n```\r\nresult.entropy            # bits\r\n\r\nresult.crack_time         # estimation of actual crack time, in seconds.\r\n\r\nresult.crack_time_display # same crack time, as a friendlier string:\r\n                          # \"instant\", \"6 minutes\", \"centuries\", etc.\r\n\r\nresult.score              # [0,1,2,3,4] if crack time is less than\r\n                          # [10**2, 10**4, 10**6, 10**8, Infinity].\r\n                          # (useful for implementing a strength bar.)\r\n\r\nresult.match_sequence     # the list of patterns that zxcvbn based the\r\n                          # entropy calculation on.\r\n\r\nresult.calc_time          # how long it took zxcvbn to calculate an answer,\r\n                          # in milliseconds.\r\n```\r\n\r\nand appears to users like this:\r\n\r\n![image](https://cloud.githubusercontent.com/assets/1455535/9588233/1e06c08a-4ff5-11e5-841b-0a6dbabe58d9.png)\r\n\r\nIt seems like this would be a better user experience for helping people create strong passwords, what do you think?\r\n\r\nMore info here:\r\nhttps://blogs.dropbox.com/tech/2012/04/zxcvbn-realistic-password-strength-estimation/"},"comment":{"url":"https://api.github.com/repos/mozilla/api.webmaker.org/issues/comments/140179344","html_url":"https://github.com/mozilla/api.webmaker.org/issues/178#issuecomment-140179344","issue_url":"https://api.github.com/repos/mozilla/api.webmaker.org/issues/178","id":140179344,"user":{"login":"k88hudson","id":1455535,"avatar_url":"https://avatars.githubusercontent.com/u/1455535?v=3","gravatar_id":"","url":"https://api.github.com/users/k88hudson","html_url":"https://github.com/k88hudson","followers_url":"https://api.github.com/users/k88hudson/followers","following_url":"https://api.github.com/users/k88hudson/following{/other_user}","gists_url":"https://api.github.com/users/k88hudson/gists{/gist_id}","starred_url":"https://api.github.com/users/k88hudson/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/k88hudson/subscriptions","organizations_url":"https://api.github.com/users/k88hudson/orgs","repos_url":"https://api.github.com/users/k88hudson/repos","events_url":"https://api.github.com/users/k88hudson/events{/privacy}","received_events_url":"https://api.github.com/users/k88hudson/received_events","type":"User","site_admin":false},"created_at":"2015-09-14T19:09:24Z","updated_at":"2015-09-14T19:09:24Z","body":"Awesome @matthewsot !!"}}