Kyauta Mai Duba Ƙarfin Kalmar Sirri
Duba ƙarfin kalmar sirrinka da nazarin entropy, ƙiyasin lokacin fasa ta, da cikakken jerin abubuwan da ake bukata. Yana aiki gaba ɗaya a cikin browser ɗinka.
Binciken ƙarfi yana gudana a na'urarka kawai. Binciken ɓarna na zaɓi da ke ƙasa yana aika haruffa 5 na farko na SHA-1 hash (ba kalmar sirri kanta ba) zuwa pwnedpasswords.com.
Hasashe kawai. Makin ƙiyasi ne bisa tsari da jerin kalmomin sirri na gama-gari. Ga kalmomin sirri da aka bayyana, binciken ɓarna da ke ƙasa shi ne gwaji mafi dogaro.
Yadda Yake Aiki
Bincike na ƙarfi yana gudana gaba ɗaya a burauzarka ta amfani da injin JavaScript da aka rubuta da hannu — babu ɗakin karatu, babu uwar garke. Yana haɗa lissafin entropy na tarin harafi, ganowar tsari (tafiya na maballin bugawa, haruffa da aka maimaita, maye gurbin da aka saba), da bincike na keta na zaɓi wanda yake amfani da Web Crypto API da k-anonymity don kalmar sirrinka kada ta taɓa barin na'urarka.
- 1An lissafta entropy na tariYayin da kake bugawa, kayan aikin yana auna wace ajin harafi suke nan — ƙaramin harafi (26), babban harafi (26), lambobi (10), alamomi (32) — yana ninka jimlar girman tarin da log2 don samun bits na entropy a kowace harafi, sannan yana ninka da tsawon kalmar sirri. Kalmar sirri ta haruffa 10 duk-ƙaramin-harafi tana farawa a kimanin bits 47.
- 2An yi amfani da hukunce-hukuncen tsariAna rage entropy danye don tsari mai tsinkaya: tafiya na maballin bugawa kamar 'qwe' ko 'asd', gudu na jere kamar 'abc' ko '321', shekaru na haruffa-huɗu (1900–2099), da gudu na haruffa da aka maimaita kowanne yana kashe bits 10. Kayan aikin yana kuma juyar da maye gurbin l33t na yau da kullum (@ → a, 0 → o, $ → s) kuma yana cire lambobi na jagora don kama 'P@ssw0rd1' a matsayin sanannen kalmar sirri ta yau da kullum 'password' da take a zahiri.
- 3An sanya maki da lokacin fasawaEntropy da aka daidaita da wani jerin abubuwa tara na dubawa (tsawo, ajin harafi, babu gudu da aka maimaita, ba sanannen kalmar sirri ta yau da kullum ba) tare suna tantance maki daga Mai Rauni Sosai zuwa Mai Ƙarfi. Ana kimanta lokacin fasawa da ɗaukan gwaji biliyan 10 a kowace daƙiƙa — lamba ta al'ada ta hare-haren GPU wajen layi — an lissafta ta 2^entropy / 10,000,000,000.
- 4Bincike na keta na zaɓi ta k-anonymityIdan ka danna 'Duba da sanannun keta', Web Crypto API yana hash kalmar sirrinka da SHA-1 a wurin nan a burauza. Haruffan hex biyar na farko na wannan hash kawai ake aikawa zuwa API na Have I Been Pwned range; ana daidaita suffix a gefen abokin ciniki. Cikakken hash — da kalmar sirrin kanta — ba su taɓa barin na'urarka ba.
Ba a taɓa aika kalmar sirrinka zuwa ko'ina ba — duk bincike na ƙarfi yana gudana a wurin nan a JavaScript, kuma bincike na keta na zaɓi yana amfani da k-anonymity (haruffa 5 na hash prefix kawai ake aikawa zuwa API na Have I Been Pwned, yana sa ba zai yiwu ba a lissafi wannan sabis ya sake gina kalmar sirrinka).
Kayan Aiki Masu Alaƙa
Mai Duba Ɓarna ta Kalmar Sirri
Duba ko kalmar sirri ta taɓa bayyana a cikin sanannun ɓarna na bayanai ta hanyar Have I Been Pwned — ta amfani da k-anonymity, don haka ana ɓoye kalmar sirrin a gida kuma ana aikawa da ɗan gajeren harafi biyar na hash kawai. Kalmar sirrin da kanta ba ta taɓa barin burauzarka.
Kebul Generator
Ƙirƙirar kalmomin sirri masu ƙarfi, bazuwar tare da tsayin al'ada, nau'ikan halaye, da keɓancewa. Babu iyaka, babu shiga.
Mai Ƙirga Syllable
Ƙirga syllables ga kowace kalma da jimla, tare da Flesch reading ease da matakin aji.