DISCUSSION: down the rabbit hole of unicode characters in passwords

@overheadhunter once posted this image and from my point it describes exactly why having complex passwords does not gain security as much as adding length to a password will do :slight_smile:

And he also did some math on the effort of bruteforcing a cryptomator vault.

So from my point of view it would be the much easier and safer way to create a long passwords based for example on a sentence than trying to use Unicode character in the password to make it more complex.
In addition to the user experience issue you are describing, there’s also a technical one. Despite that cryptomator does allow Unicode chars, what if you want to access your vault with third party tools, like cyberduck (or any other tool that can handle cryptomator vaults). Not sure if they do also allow Unicode chars in their tool.
(The last argument is just a minor one)

1 Like