8
ONYX v1.2-beta - need a feedback!
(lemmy.ml)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 30 Mar 2026
8 points (83.3% liked)
Open Source
47207 readers
375 users here now
All about open source! Feel free to ask questions, and share news, and interesting stuff!
Useful Links
- Open Source Initiative
- Free Software Foundation
- Electronic Frontier Foundation
- Software Freedom Conservancy
- It's FOSS
- Android FOSS Apps Megathread
Rules
- Posts must be relevant to the open source ideology
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
- !libre_culture@lemmy.ml
- !libre_software@lemmy.ml
- !libre_hardware@lemmy.ml
- !linux@lemmy.ml
- !technology@lemmy.ml
Community icon from opensource.org, but we are not affiliated with them.
founded 6 years ago
MODERATORS
16 character minimum password?
Yes, 16 characters minimum. Since there's no phone number, no email, and no alternative recovery method - the password is the only thing protecting your account. A weak password with no fallback is a real risk, so I set the bar higher intentionally. It also reduces brute force viability. Passphrases are supported but currently not used for login - just the password for now.
That's a shame. It was my reason for uninstalling. I don't have a password manager on mobile so there is no chance of me remembering such a long password, so it would lead me to either writing it down on paper, or worse, sending it to myself via a messenger so I don't need to type it in all the time, which I feel in all cases is less secure than having a shorter but more complicated password (maybe about 8 characters).
I'm assuming other users may share my opinion, especially for a genre of app like a messenger, for which it is generally hard to convince people to install as they don't want to leave their closed WhatsApp playpen.
Maybe a solution which caters for both worlds could be considered: recommend 16 but accept and warn if someone types in a shorter one (with a minimum of 8)?
I understand it's not for everyone. But the 16-character minimum is there for a reason — your password is the only key to your account, no fallbacks, no recovery via phone or email. That requires a strong password. There's a built-in password generator in the app — one tap, cryptographically secure, 16 characters, done. Save it once and you won't need to type it again. Think of it like a crypto wallet seed phrase — you store it once somewhere safe and that's it. If the priority is speed over security, Telegram is a better fit. ONYX was built for people who actually care about privacy, and that comes with a slightly higher entry bar. That said, I'll consider dropping the hard minimum to 8 characters with a strong recommendation to use 16 — so people have the choice but know the tradeoffs.