Bug? Very secure password flagged as insecure (issue on both android and mac os x)

[klktrk]

I created a 30+ character password with both upper and lower case letters, symbols, and numbers, with no words in it, and Enpass flags it as a "weak" password.

This happens in Mac OS X (6.6.1 (809)) as well as Android (6.7.1.572).

 

 

Edited October 13, 2021 by klktrk
Edited screenshot for more privacy.

[Gulshan Dogra]

Hi @klktrk,

Thank you for reaching out to us.

I would like to share some information about Enpass Password Strength Estimation in the Passowrd Generator. Entropy is a measure of password strength and Enpass uses Zxcvbn for calculation of the entropy of random passwords. Click on this link to know more about zxcvbn.

If a password is pronounceable, Enpass calculates both Zxcvbn and Diceware entropy and the least of them will be used to show strength. The strength meter is calibrated for the following corresponding entropy to display values.

.

Cheers !!