<p>I have created a package for dictionary password validation for Go.</p>
<p>This can be used to protect your bcrypt/scrypt/PBKDF encrypted passwords against dictionary attacks. This is much more of a threat than brute force attacks, and is of course done by checking them against a dictionary (no magic).</p>
<p>Motivated by <a href="http://blog.klauspost.com/password-requirements-done-better/">Password Requirements Done Better</a> - also called <em>why password requirements help hackers</em>, this package will remove all your excuses for not having good passwords.</p>
<ul>
<li>Package home: <a href="https://github.com/klauspost/password">https://github.com/klauspost/password</a></li>
<li>Godoc: <a href="https://godoc.org/github.com/klauspost/password">https://godoc.org/github.com/klauspost/password</a></li>
</ul>
<p>You are able to use your own database and password dictionary. Currently the package supports importing common dictionary formats, and has built-in "drivers" for MongoDB, BoltDB, MySQL and PostgreSQL.</p>
<p>I have just finished up the documentation and tests, but I am very open to suggestions, and if your favorite database is missing feel free to request it.</p>
