HexBrain

Tor · Report #280282

Enforce minimum master password complexity

N/Astatus
mediumseverity
1upvotes
19 Oct 2017disclosed

How it was found

Hi Team,

Actual results:

There is no password complexity set for Master password in about:preferences#security , Because I was able to set my password like 123,123456,www, admin etc which is really common, apart from that we can use spaces as well in master password i was able to set space as my master password :/

Expected results: Recommendation - Provide robust rules including upper lower letters, special characters etc.

Ref: https://bugzilla.mozilla.org/show_bug.cgi?id=1408427

Regards Dhiraj

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original