Avoid Arbitrary Length Restrictions in Generator

Perhaps, although that approach is fraught with its own perils, as I have previously explained in the relevant feature request thread (and if you wish to further discuss issues surrounding strength indicators, I would be happy to do so in that thread).

An alternative approach to “protect the user from themselves” would be to make available a user option (under Settings, not in the Generator UI itself) to “Allow generation of passwords/passphrases with fewer than X bits of entropy” — the value of X could either be fixed (in which case the user would have the option to enable the option), or adjustable (allowing the user to set their own lower bound).

2 Likes