Spotting Flaws in a Password Acceptance Policy

System Design · Karat · Easy

You are building a system that checks whether a password is acceptable. The proposed rule set is: Any password that is an English word is rejected. The password's length must be between 8 and 16 characters. The password must include at least one uppercase letter, at least one lowercase letter, and at least one symbol. Point out what is wrong with these rules, and explain how you would change them to address each problem you identify.

Loading the rest of the question…