Skip to main content
Topic: [ADDON] Password Strength (Read 2688 times) previous topic - next topic
0 Members and 1 Guest are viewing this topic.

[ADDON] Password Strength

This adds a password strength indicator to password fields and can be used to require a minimal level.  This is not an ordinary strength check where it checks for some extra characters or upper / lower characters, but instead is a realistic password strength estimation for a given password to stand up to a real attack.  https://tech.dropbox.com/2012/04/zxcvbn-realistic-password-strength-estimation/

Password Entropy Version 1.0.1

License
This ElkArte addon is released under a MPL V1.1 license, a copy of it with its provisions is included with the package.
This addon uses the zxcvbn-php library which is released under the The MIT License (MIT)

Introduction
This measures the effectiveness of a password in resisting guessing and brute-force attacks. In its usual form, it estimates how many trials an attacker who does not have direct access to the password would need, on average, to guess it correctly. The strength of a password is a function of length, complexity, and unpredictability.

Unlike basic entropy checks which grades based on the set of symbols (a-zA-Z0-9etc) in potential use at each position, this goes further and takes in to account patterns that people will tend to follow and also compares entered passwords against a list of know common passwords that are in use and theretofore vulnerable to attacks.

Features
o Enable or disable the addon from the control panel
o Require users to enter a password that meets a set threshold (good/strong/etc)
o Show a strength meter on most pages where a password can be reset (profile, authentication, registration)
o Hovering over the password meter will show the estimated time for a computer to crack a given password with a brute force attack

Repository / Download
http://addons.elkarte.net/security/Password-Entropy.html
Squish squish. squish, squish, squish.
Find a bug,
Make a wish.

Re: [ADDON] Password Strength

Reply #1
Just 2 doubts,..
can this mod or say all mods present here work if ElkArte is not been installed on smf ??
Ans secondly can we install ElkArte in we already installed simple portal ??

Re: [ADDON] Password Strength

Reply #2
Hello GamePersia and welcome around! :)

I'm not entirely sure I understand your questions. I can sat that ElkArte is something to use instead of SMF, not to install into SMF.
That said, the only issue that may come to my mind is that using OpenImporter to convert from SMF to ElkArte it's not going to move the SimplePortal tables, so you'd have to do that part by hands.

@TE what do you think: would be possible to add an optional import for mods tables? Dunno, something like an option: "Import all other tables with the same prefix to ElkArte"?
Bugs creator.
Features destroyer.
Template killer.

Re: [ADDON] Password Strength

Reply #3
Hello GamePersia and welcome around! :)

I'm not entirely sure I understand your questions. I can sat that ElkArte is something to use instead of SMF, not to install into SMF.
That said, the only issue that may come to my mind is that using OpenImporter to convert from SMF to ElkArte it's not going to move the SimplePortal tables, so you'd have to do that part by hands.

Oh,..got it...
so we cannot install ElkArte into smf,..rather it's another forum like smf !!  :P
but can we use the mods for ElkArte on smf ??  :o

Re: [ADDON] Password Strength

Reply #4
Quote
so we cannot install ElkArte into smf,..rather it's another forum like smf !!  :P
Yes
Quote
but can we use the mods for ElkArte on smf ??  :o
No, ElkArte addons will not directly work with SMF
Squish squish. squish, squish, squish.
Find a bug,
Make a wish.

Re: [ADDON] Password Strength

Reply #5
@TE what do you think: would be possible to add an optional import for mods tables? Dunno, something like an option: "Import all other tables with the same prefix to ElkArte"?
yep, sure.. Not automated, but you just need to create another step with the releated queries in import_smf2.xml ..
Thorsten "TE" Eurich
------------------------

Re: [ADDON] Password Strength

Reply #6
Help!

With me there is nowhere option to enable the hook :(

sorry for my english

No found.

Re: [ADDON] Password Strength

Reply #7
It should have installed it under registration settings ...  ?action=admin;area=regcenter;sa=pwentropy
Squish squish. squish, squish, squish.
Find a bug,
Make a wish.

Re: [ADDON] Password Strength

Reply #8
It's not in the settings of registration.. :(
No found.

Re: [ADDON] Password Strength

Reply #9
UP POST.. Help me
No found.

Re: [ADDON] Password Strength

Reply #10
First thing that I found is that filenames (Pwentropy.subs.php, Pwentropy.controller.php, Pwentropy.class.php) are starting from BIG letter, while in package-info.xml in hooks instructions  they are lowercase, so hooks are not loaded.

Second:
In file Pwentropy.subs.php
Code: [Select]
'enabled' => !empty($modSettings['pwentropy_enabled']),
needs to be
Code: [Select]
'enabled' => true,

otherwise tab in menu will not be visible.

Also in file Pwentropy.subs.php in function imr_pwentropy() this code needs to be removed, because with it subaction with settings page does not work:
Code: [Select]
	if (empty($modSettings['pwentropy_enabled']))
return;


//edit:
but there is still error when I'm typing password on registration page:
Quote
Error : SyntaxError: Unexpected end of input

Re: [ADDON] Password Strength

Reply #11
 Spuds blames Bill Gates
Squish squish. squish, squish, squish.
Find a bug,
Make a wish.

Re: [ADDON] Password Strength

Reply #12
@ Spuds - will fix?
No found.

Re: [ADDON] Password Strength

Reply #13
Yup I'll get to it tomorrow for sure, been having to working on some other things the last couple of days.
Squish squish. squish, squish, squish.
Find a bug,
Make a wish.

Re: [ADDON] Password Strength

Reply #14
thanks to Spuds :)
No found.