Augmenting password generation and validation

A non-transitory computer readable medium comprising computer executable instructions which when executed by a computer cause the computer to perform a method for improving the security performance of the computer, said method comprising:

• with a retrieval component executing on the computer, obtaining a list of known compromised passwords;
• with a validation component executing on the computer, obtaining a specification of a putative password;
• with said validation component executing on the computer, risk-scoring said putative password based at least in part on presence of said putative password in said list of known compromised passwords;
• obtaining, at said computer system, a specification of an actual password chosen in accordance with said risk score of said putative password;
• and
• controlling access to at least one aspect of said computer system based on said actual chosen password.

An apparatus comprising:

• a memory;
• at least one processor, coupled to said memory;
• and
• a non-transitory computer readable medium comprising computer executable instructions which when loaded into said memory cause said at least one processor to:
• instantiate a retrieval component;
• instantiate a validation component;
• with said retrieval component, obtain a list of known compromised passwords;
• with said validation component, obtain a specification of a putative password;
• with said validation component, risk-score said putative password based at least in part on presence of said putative password in said list of known compromised passwords;
• obtain a specification of an actual password chosen in accordance with said risk score of said putative password;
• and
• control access to at least one aspect of said computer system based on said actual chosen password.