I noticed that a check on a good password takes ~.5 seconds. However, if you give a password that is incorrect, it takes ~3 seconds to inform the user as such. Why is this?
I noticed that a check on a good password takes ~.5 seconds. However, if you give a password that is incorrect, it takes ~3 seconds to inform the user as such. Why is this?
Its for the security of the operating system. The arbitrary wait is to check brute-force attacks.
Duplicate Question: https://serverfault.com/questions/16232/ubuntu-linux-takes-longer-time-for-incorrect-passwords