Is it a good idea to expire passwords after a time relative to their security?
If a user has to change their password ever so often, is it a good thing to check it against zxcvbn or similar library and assign a expiration date relative to the risk of the hash being cracked?
Aucun commentaire:
Enregistrer un commentaire