Getting started with 1Password for your growing team, or refining your setup? Our Secured Success quickstart guide is for you.
Forum Discussion
Former Member
5 years agoFeature: Weak Passwords
I know that yall have had posts requesting this feature before. I saw it in the MAC forum i think. I was going through updating sites on old passwords, and obviously the first thing i click on is wea...
Former Member
5 years agoI work for a worldwide company, and its worldwide company intranet, running with 10.x.y.y addresses, is operated with roughly the same security policy as you would have for internet hosts. With other words: it is mandatory hosts within the intranet must be as secure as if they were directly exposed to the internet. The intranet is considered only a bit less hostile than the internet itself, it' not considered as friendly and secure.
So passwords used within the private network range must be as strong as passwords that are used for internet hosts.
Another thing against excluding private network ranges from password checking: 1Password cannot know if a host is accessible from the internet with NAT or port forwarding. The same host you can connect to as 10.10.10.10 might be accessible from a public IP if this is configured on some NAT router exposed to the internet, so it's ok if weak passwords are reported.
The only viable way I see is the ability to manually flag a weak password as "risk accepted for weak password" and make it vanish from Watchtower if flagged as this. I assume such functionality has not been added until now, because some people would just flag all their weak passwords to make them going away as alert without actually realizing the risk. In my opinion, this is too much care and attempt to protect the user from himself.