# Validador de Senhas Pwned **URL:** \ **Category:** Plugin\ **Created:** [17 Junho , 2018 23:10 UTC](https://meta.discourse.org/t/pwned-passwords-validator/90074 "2018-06-17T23:10:34Z")\ **Posts on this page:** 1\ **Showing post:** 22
**Author:** ![vitorl](https://avatars.discourse-cdn.com/v4/letter/v/57b2e6/32.png) [@vitorl](https://meta.discourse.org/u/vitorl)\ **Post date:** [26 Setembro , 2018 07:12 UTC](https://meta.discourse.org/t/pwned-passwords-validator/90074/22 "2018-09-26T07:12:56Z")
What would really solve the issue here, in my humble opinion, would just to apply best practices like preventing an IP to try to login more than X times without success, don’t let people try passwords at non human time ( humans don’t try a password every 1 sec ) would fix the security issue without forbidding all the passwords. The way I see is, someone can make a list that gives all the combinations of A-Z 1-9 up to X length. This means nothing if you can’t brute force the target, unless it’s a targed attack and then there’s not much you can do. Is anything like that currently implemented? --- _[View the full topic](https://meta.discourse.org/t/pwned-passwords-validator/90074)._