I love the idea behind this library! I saw your todo of increasing the dictionary check, and realized that it lines up pretty closely with the work I did for my own gem, unpwn. Because dictionaries are too slow (and too big), I created a bloom filter from the top 1 million most common passwords that only takes up a few megabytes but has very good accuracy.
If a network connection is available, unpwn can also check the haveibeenpwned.com API to validate that the chosen password has never been included in any breach, ever.
Let me know if you have any questions, or there's something I could change about unpwn to make it easier for you to use to augment your dictionary check!
I love the idea behind this library! I saw your todo of increasing the dictionary check, and realized that it lines up pretty closely with the work I did for my own gem, unpwn. Because dictionaries are too slow (and too big), I created a bloom filter from the top 1 million most common passwords that only takes up a few megabytes but has very good accuracy.
If a network connection is available, unpwn can also check the haveibeenpwned.com API to validate that the chosen password has never been included in any breach, ever.
Let me know if you have any questions, or there's something I could change about unpwn to make it easier for you to use to augment your dictionary check!