[GH-ISSUE #52] Avoid confusable characters in generated passwords #12

New issue

Closed

opened 2026-03-04 01:34:06 +03:00 by kerem · 2 comments

kerem commented

2026-03-04 01:34:06 +03:00

Owner

Originally created by @rgov on GitHub (Aug 24, 2022).
Original GitHub issue: https://github.com/spr-networks/super/issues/52

I got a password that contained the substring 1l, which are hard to differentiate when displayed in a proportional font (e.g., if sent over a messaging app).

It would be good to consider password ergonomics generally. E.g., the uavpxq-ehthib-estutw-tlniyx-qzsizv style is easier to type on a phone keyboard, requiring few switches to the numeric/symbol keys. On the other hand with something like a printer this might be more tedious.

Originally created by @rgov on GitHub (Aug 24, 2022). Original GitHub issue: https://github.com/spr-networks/super/issues/52 I got a password that contained the substring `1l`, which are hard to differentiate when displayed in a proportional font (e.g., if sent over a messaging app). It would be good to consider password ergonomics generally. E.g., the `uavpxq-ehthib-estutw-tlniyx-qzsizv` style is easier to type on a phone keyboard, requiring few switches to the numeric/symbol keys. On the other hand with something like a printer this might be more tedious.

kerem closed this issue

2026-03-04 01:34:06 +03:00

kerem commented

2026-03-04 01:34:07 +03:00

Author

Owner

@0vercl0k commented on GitHub (Jun 1, 2023):

I ran into something similar today; the below highlighted character was totally not what I thought it was; I don't quite remember what it ended up being but it might have been a 1 although it looks more like a uppercase i. I grabbed a snapshot so that you guys can debug:

@0vercl0k commented on GitHub (Jun 1, 2023): I ran into something similar today; the below highlighted character was totally not what I thought it was; I don't quite remember what it ended up being but it might have been a 1 although it looks more like a uppercase i. I grabbed a snapshot so that you guys can debug: ![signal-2023-06-01-074905_002](https://github.com/spr-networks/super/assets/1476421/2d9f6503-0731-4144-9c17-e574d49eecef)

kerem commented

2026-03-04 01:34:07 +03:00

Author

Owner

@lts-po commented on GitHub (Jul 27, 2023):

The updated genSecurePassword now avoids 1l, O0 etc.

@lts-po commented on GitHub (Jul 27, 2023): The updated genSecurePassword now avoids 1l, O0 etc.

kerem referenced this issue

2026-03-04 01:35:53 +03:00

[PR #12] [MERGED] UI changes - tests and github actions for build and testing #245