Password requirements

[Robert]

Hi, when updating my Axcrypt from version 1.x to 2.1 I had to change my password. Unfortunately, I forgot it in the meantime.

I might be able to reconstruct it when knowing the requirements for the PW. Can you please give me this information? It might be something like “min. 6 characters with 1 Uppercase” or “8 characters and numbers” or the like.

Thanks in advance for your support.

[Fred]

It must be a minimum of 8 characters and not a common word like “password”.

If you don’t know the password then you’ll have to call it a day.

Even if you were able to automate guessing at 1000 passwords / second then you’d be looking at 1 trillion years to guess. AxCrypt deliberately slows down password cracking tools to make it mathematically impossible to crack your password any time the foreseeable future.

[SvanteSpectator]

Hello Robert and Fred,

I’m afraid the password requirements are not going to help with a brute force attack, at least not much. The easy summar is, at least 8 characters, and “sufficiently” complex.

What we actually do is more advanced. It has to be at least 8 characters. First we filter out the 1000 most common passwords when judging the strength (so “Password1234” is equivalent to no password at all). Then we calculate the “entropy” in bits of the password. Simply put, we do this by attempting to compress the password, and count the resulting bits, and then we have a lower threshold in bits where we won’t accept it.

If you actually think you almost know the password, let’s say you’d just need at most a million guesses, then it’s feasible if you have a good computer and some time. We have a simple tool to assist you in this case. Please contact support att axcrypt dott net if you need this tool.

[Author]

Posts