Proposed guidelines aim to inject badly needed common sense into password hygiene.

Here is the text of the NIST sp800-63b Digital Identity Guidelines.

    • xthexder@l.sw0.comEnglish
      3·
      1 month ago

      Yeah, multiple languages or even putting an ê or something in an English password to mix things up. It makes perfect sense to allow.

      It’s a good thing they require each codepoint to be treated as one character for the length limit, since “🤔🤣” is 8 bytes on its own, but the unicode prefix is trivial to guess.