Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Wallet is using an obsolete password policy #22817

Closed
fmarier opened this issue May 12, 2022 · 1 comment · Fixed by brave/brave-core#13146
Closed

Wallet is using an obsolete password policy #22817

fmarier opened this issue May 12, 2022 · 1 comment · Fixed by brave/brave-core#13146
Assignees
Labels

Comments

@fmarier
Copy link
Member

fmarier commented May 12, 2022

Wallet currently requires the following password policy:

Screenshot from 2022-05-05 17-11-46

which is not in line with the latest password policy guidelines from NIST.

In particular, the following changes should be made:

  • minimum length must be 8 characters
  • different character types should not be required

(Also see https://auth0.com/blog/dont-pass-on-the-new-nist-password-guidelines/ for an explanation of the changes in NIST recommendations.)

@fmarier fmarier added feature/web3/wallet Integrating Ethereum+ wallet support OS/Desktop security labels May 12, 2022
@jamesmudgett jamesmudgett added the priority/P3 The next thing for us to work on. It'll ride the trains. label Jun 7, 2022
@josheleonard josheleonard self-assigned this Jul 19, 2022
@brave-builds brave-builds added this to the 1.44.x - Nightly milestone Aug 12, 2022
@srirambv
Copy link
Contributor

Verified as part of #22591 (comment)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
Archived in project
Development

Successfully merging a pull request may close this issue.

5 participants