←back to thread

Apple Passwords’ generated strong password format

(rmondello.com)
430 points tambourine_man | 1 comments | 18 Oct 24 11:12 UTC | HN request time: 0.202s | source
Show context
pdxpatzer ◴[18 Oct 24 16:20 UTC] No.41880856[source]▶
question: would it be possible/smart to have a system where the entity that is authenticating you has a way to disclose to you the maximum password complexity that it can handle ? Something like a GeekCode string that you can feed to your password generator and come out with a the strongest password possibly handled by the system ?
replies(4): >>41880919 #>>41881211 #>>41882457 #>>41883712 #
1. ttepasse ◴[18 Oct 24 21:34 UTC] No.41883712[source]▶
Apple some years ago proposed a string format for password rules – to be used in password managers and also an HTML attribute for that:

  <input type="password" passwordrules="minlength: 8; maxlength: 12; required: lower; required: upper; required: digit; required: [-];">
It seems implemented in Safari and UIKit, but I can’t find any implementation documentation for other brothers. Sad.

https://developer.apple.com/password-rules/

https://developer.apple.com/documentation/security/customizi...