您如何执行强密码? [英] How do you enforce strong passwords?
问题描述
有很多技术可以在网站上强制使用强密码:
There are many techniques to enforce strong passwords on website:
- 请求密码通过复杂程度各异的正则表达式
- 自主设置密码，以便临时用户具有较强的密码
- 离开密码已过期
- 等
另一方面，也有缺点，因为所有这些缺点都使用户的生活变得不那么轻松，这意味着更少的注册.
On the other hands there are drawbacks, because all of them make life less easy for the user, meaning less registrations.
那么，您使用什么技术?哪个提供最佳的保护与不便比率?
为澄清起见，我并不是在指银行网站或存储信用卡的网站.在仍然需要注册的受欢迎(或不那么受欢迎)的网站上考虑更多.
推荐答案
我认为无法强制使用强密码，但是您可以做很多事情来尽可能地鼓励它们.
I don't think it's possible to enforce strong passwords, but there are lots of things you can do to encourage them as much as possible.
- 给每个密码定级，并以分数或图形栏等形式向用户提供反馈.
- 设置最低密码分数，以清除糟糕的密码
- 具有被禁止或隐藏密码分数的常见单词列表
- Rate each password and give the user feedback in the form of a score or a graphical bar, etc.
- Set a minimum password score to weed out the awful ones
- Have a list of common words that are either banned, or tank the password score
我要使用的一个优秀技巧是将密码的有效期限与密码得分挂钩.因此，更强大的密码不需要经常更改.如果您可以直接向用户提供有关所选密码的有效期限(并动态更新密码，以便他们可以看到添加字符如何影响日期)的反馈，那么这特别有效.
One excellent trick I like to use is to have the password's expiry date tied to the password score. So stronger passwords don't need to be changed so often. This works particularly well if you can give users direct feedback about how long the password they've chosen will live for (and dynamically update it so they can see how adding characters affects the date).
这篇关于您如何执行强密码?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
