{"id":101648,"date":"2016-08-20T14:00:31","date_gmt":"2016-08-20T12:00:31","guid":{"rendered":"http:\/\/mygaming.co.za\/news\/?p=101648"},"modified":"2016-08-20T14:11:09","modified_gmt":"2016-08-20T12:11:09","slug":"those-password-strength-meters-are-actually-useless","status":"publish","type":"post","link":"https:\/\/mygaming.co.za\/news\/features\/101648-those-password-strength-meters-are-actually-useless","title":{"rendered":"Those password strength meters are actually useless"},"content":{"rendered":"<p>If you spend any part of your day in front of a screen, be it for gaming, work, or just browsing the web, then you probably have multiple username and password logins.<\/p>\n<p>Upon choosing a password you would\u00a0have been confronted with a little bar showing how &#8220;secure&#8221; your password is.<\/p>\n<p>Only have letters? Adding a few numbers, symbols, or even a few extra characters will bump that red bar straight up to bright green and you can carry on with your day knowing that your login details are perfectly secure.<\/p>\n<p>Except these password strength meters actually promote &#8220;piss-poor passwords&#8221; according to a new report by <strong><a href=\"http:\/\/www.theregister.co.uk\/2016\/08\/19\/strength_metres_excel_at_promoting_the_worlds_weakest_passwords\/\" target=\"_blank\">The Register<\/a><\/strong>.<\/p>\n<p>This follows a study performed by Compound Eye developer <strong><a href=\"https:\/\/nakedsecurity.sophos.com\/2016\/08\/17\/why-you-still-cant-trust-password-strength-meters\/\" target=\"_blank\">Mark Stockley<\/a><\/strong> who confirmed that you can&#8217;t trust such meters.<\/p>\n<p>&#8220;The passwords I used in the test are all, deliberately, absolutely dreadful. They\u2019re chosen from a list of the 10,000 most common passwords and have characteristics I thought the password strength meters might overrate.&#8221;<\/p>\n<p>The basis for his argument is that the meters rate character complexity but fail to identify combinations that can be guessed outright, such as popular passwords or those based on cliches.<\/p>\n<p>Several password strength meters considered &#8220;abc123&#8221;, &#8220;trustno1&#8221;, &#8220;ncc1701&#8221; (the registration number of the USS Enterprise), &#8220;iloveyou!&#8221; and &#8220;primetime21&#8221; acceptable.<\/p>\n<p>Even Microsoft believes that password strength meters should be<strong><a href=\"https:\/\/www.microsoft.com\/en-us\/research\/publication\/an-administrators-guide-to-internet-password-research\/\" target=\"_blank\"> binned.<\/a><\/strong><\/p>\n<hr \/>\n<h3 class=\"my-4\">More gaming news<\/h3>\n<p><strong><a title=\"Permalink to PS4 and Xbox One will be the last console generation: Microsoft\" href=\"http:\/\/mygaming.co.za\/news\/xbox\/101590-ps4-and-xbox-one-will-be-the-last-console-generation-microsoft.html\" rel=\"bookmark\">PS4 and Xbox One will be the last console generation: Microsoft<\/a><\/strong><\/p>\n<p><strong><a title=\"Permalink to AMD Zen CPU details revealed \u2013 faster than Intel Broadwell-E\" href=\"http:\/\/mygaming.co.za\/news\/hardware\/101598-amd-zen-cpu-details-revealed-faster-than-intel-broadwell-e.html\" rel=\"bookmark\">AMD Zen CPU details revealed \u2013 faster than Intel Broadwell-E<\/a><\/strong><\/p>\n<p><strong><a title=\"Permalink to Watch: Incredible Overwatch short \u201cThe Last Bastion\u201d\" href=\"http:\/\/mygaming.co.za\/news\/pc\/101586-watch-incredible-overwatch-short-the-last-bastion.html\" rel=\"bookmark\">Watch: Incredible Overwatch short \u201cThe Last Bastion\u201d<\/a><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Can we actually trust those password &#8220;strength&#8221; meters?<\/p>\n","protected":false},"author":234,"featured_media":101650,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_enabled":true,"_sma_x_custom_text":"","_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[20,8585],"tags":[19773,91,11956,1461,1886],"class_list":["post-101648","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-features","category-gadgets","tag-meter","tag-microsoft","tag-password","tag-security","tag-study"],"_links":{"self":[{"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/posts\/101648","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/users\/234"}],"replies":[{"embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/comments?post=101648"}],"version-history":[{"count":1,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/posts\/101648\/revisions"}],"predecessor-version":[{"id":101658,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/posts\/101648\/revisions\/101658"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/media\/101650"}],"wp:attachment":[{"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/media?parent=101648"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/categories?post=101648"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/tags?post=101648"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}