Secure USERNAME length

hacking
1

Hi everyone :grinning:

I have a question related with the creation of a “Secure username/password” combination.
According to OWASP https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html A secure password should have at least 8 characters in length using Alpha numeric characters with at least one Special character.

in relation with the USERNAME it does not recommend anything.
Should we consider “Secure” a one character name USERNAME with a “secure password”? :face_with_monocle:

Example:
Username : a
Password: pX8*TKrmK`7’!j>
( it the previous example secure)?

Ideas and comments are welcome :grinning:

1 Like
2

Consider user/password combination as a unique credential field. Like adminThePassword, is this combination secure? Yes, if password is strong enough. Probably OWASP do not consider username secure standards because password specifications overcome the weakness of simple usernames.

3

We should follow this criteria:

https://fluidattacks.com/web/rules/#credentials