Security Level

[quixin]

Can anyone tell me why eBay rates my password with 1 bar on their scale of security?  I am using:

Use leet - before and after generating password
Leet level - 9
Hash Algorithm - SHA-256
Length - 12

Here is a screen shot from the eBay page.

[Eric H. Jung]

Hi quixin,
I don't know what ebay's criteria for a secure password is. Can you send me the URL to this part of ebay? I'd like to read the link which says See Tips.

My guess as to why they're giving it a low rating is because the password you're using doesn't use a wide variety of characters. PasswordMaker 0.6 and lower only use the characters 0123456789abcdef plus a handful of special characters if you choose l33t.

You can get a much wider use of characters when using PasswordMaker 0.6.1 beta (and above, of course), because you can define which characters the passwords should be made up of--for example, all uppercase letters, all lowercase letters (not just a through f), all numbers, all special characters, and even non-English characters like those with diacritical marks.

Hope this helps,
eric

[quixin]

Here is the link to the See Tips page: http://pages.ebay.com/help/new/contextual/...ection_psv.html

Here is the contents:

Creating an eBay Password

When creating your password, follow these simple tips:

    * Use a combination of at least 6 to 8 letters, numbers, and special characters (example - Beatlesfan#28, $uperman1963).
    * Use multiple words without spaces (example - bestjetpilot).
    * Don't use single words that can be found in any dictionary (example - kangaroo).
    * Don't use personal information others can easily obtain or guess (example - your name, phone number, or birth date).
    * Don't use your email address or eBay User ID.

The Security Meter helps you create a more secure password. As you type letters, numbers, and special characters in the password box, the Security Meter moves up or down to suggest how secure your password is. You should create a password that's secure, but still easy for you to remember!

After creating your password, protect it. Don't share your password with others, and avoid using the same password for other online accounts.

Please note that eBay employees will never ask you for your password.

-----------------------------------

Not that eBay is a standard for security information, I was just curious as to why the meter was so low,  It would appear to me that the generated password follows all the tips listed on that page.

Thanks!
quixin

[Eric H. Jung]

Can you send the URL to the security meter itself? I'm having a hard time finding it. I'd like to look at their Javascript code which evaluates the password.

thanks,
grimholtz

[quixin]

This should take you right to it:

https://scgi.ebay.com/ws/eBayISAPI.dll?Choo...et+St&zip=32258