We have moved at community.getvera.com

Author Topic: Password strength  (Read 1320 times)

Offline joel

  • Jr. Member
  • **
  • Posts: 50
  • Karma: +0/-0
Password strength
« on: November 12, 2014, 02:49:37 pm »
I'm unable to use non-alphanumeric characters (e.g. ! or -) for the admin account on my Vera 3. Is this being fixed?

Does Vera have a defense against brut force attacks, by limiting the number of password attempts?

Thanks - Joel

Offline futzle

  • Beta Testers
  • Master Member
  • *****
  • Posts: 3260
  • Karma: +192/-9
Re: Password strength
« Reply #1 on: November 12, 2014, 04:13:12 pm »
The range of characters in passwords has been talked about before.  Here's one: http://forum.micasaverde.com/index.php/topic,6433.msg40125.html#msg40125

However, because information theory is hard and people don't seem to understand the message of xkcd 936, from UI6 onwards you can (I think must) include non-alphanumeric characters in your password.

Offline joel

  • Jr. Member
  • **
  • Posts: 50
  • Karma: +0/-0
Re: Password strength
« Reply #2 on: November 13, 2014, 12:12:45 am »
Got it. Vera security efforts based on cartoon meme.