Passphrases are of course stronger and easier to remember than passwords, but whitespace causes endless problems, which in turn cause endless support calls
Whitespace in a passphrase should therefore be canonicalized before hashing. Multiple spaces, tabs, and carriage returns should become a single space. Leading and trailing whitespace should be stripped.
These documents are licensed under the Creative Commons Attribution-Share Alike 3.0 License