Why Autocorrect for Passwords Is a Great Idea
technologyreview.com
Why Autocorrect for Passwords Is a Great Idea
1–4 of 4 posts
Re: Why Autocorrect for Passwords Is a Great Idea
#2“Websites should be changing their password policies to make users’ lives easier. The security degradation is pretty small.”
Security isn't supposed to be convenient. Autocorrecting passwords sounds like a bad idea all-around and will be exploited.
Re: Why Autocorrect for Passwords Is a Great Idea
#3“Websites should be changing their password policies to make users’ lives easier. The security degradation is pretty small.” Security isn't supposed to be convenient. Autocorrecting passwords sounds like a bad idea all-around and will be exploited.
According to the article, they ran simulations and it only provided a .2% increase in likelihood of a breach
Re: Why Autocorrect for Passwords Is a Great Idea
#4Assuming they're right, if you don't store passwords in the clear, you'd have to build all acceptable variants of a password when you get the original, then hash and store all of them, then check them all at next login attempt.
If you wanted to add a new kind of "allowable typo" (eg "correct except with capslock") you'd have to wait until the user next logged in to store that variant.