Merge branch 'develop' of https://github.com/firefly-iii/firefly-iii into develop

* 'develop' of https://github.com/firefly-iii/firefly-iii: (23 commits) New translations firefly.php (Dutch) New translations firefly.php (Chinese Traditional) New translations firefly.php (Dutch) New translations firefly.php (Polish) New translations firefly.php (Portuguese, Brazilian) New translations firefly.php (Slovenian) New translations firefly.php (Spanish) New translations firefly.php (German) New translations firefly.php (French) New translations firefly.php (Russian) New translations firefly.php (Dutch) New translations validation.php (Dutch) New translations form.php (Dutch) New translations csv.php (Dutch) New translations firefly.php (Slovenian) New translations firefly.php (Spanish) New translations firefly.php (Portuguese, Brazilian) New translations firefly.php (Polish) New translations firefly.php (Chinese Traditional) New translations firefly.php (Dutch) ...
2025-02-25 18:45:27 -06:00 · 2017-08-12 09:14:54 +02:00 · 2017-08-12 09:14:54 +02:00 · 1453a318fe
commit 1453a318fe
parent 29b779c873 9ffa01d318
12 changed files with 105 additions and 6 deletions
--- a/resources/lang/de_DE/firefly.php
+++ b/resources/lang/de_DE/firefly.php
@ -417,6 +417,16 @@ Sollen zusätzlich Ihre Girokonten angezeigt werden?',
    'password_changed'                           => 'Passwort geändert!',
    'should_change'                              => 'Ziel ist es, ihr Passwort zu ändern.',
    'invalid_password'                           => 'Ungültiges Passwort!',
+    'what_is_pw_security'                        => 'What is "verify password security"?',
+    'secure_pw_title'                            => 'How to choose a secure password',
+    'secure_pw_history'                          => 'In August 2017 well known security researcher Troy Hunt released a list of 306 million stolen passwords. These passwords were stolen during breakins at companies like LinkedIn, Adobe and NeoPets (and many more).',
+    'secure_pw_check_box'                        => 'By checking the box, Firefly III will send the SHA1 hash of your password to <a href="https://www.troyhunt.com/introducing-306-million-freely-downloadable-pwned-passwords/">the website of Troy Hunt</a> to see if it is on the list. This will stop you from using unsafe passwords as is recommended in the latest <a href="https://pages.nist.gov/800-63-3/sp800-63b.html">NIST Special Publication</a> on this subject.',
+    'secure_pw_sha1'                             => 'But I thought SHA1 was broken?',
+    'secure_pw_hash_speed'                       => 'Yes, but not in this context. As you can read on <a href="https://shattered.io/">the website detailing how they broke SHA1</a>, it is now slightly easier to find a "collision": another string that results in the same SHA1-hash. It now only takes 10,000 years using a single-GPU machine.',
+    'secure_pw_hash_security'                    => 'This collision would not be equal to your password, nor would it be useful on (a site like) Firefly III. This application does not use SHA1 for password verification. So it is safe to check this box. Your password is hashed and sent over HTTPS.',
+    'secure_pw_should'                           => 'Should I check the box?',
+    'secure_pw_long_password'                    => 'If you just generated a long, single-use password for Firefly III using some kind of password generator: <strong>no</strong>.',
+    'secure_pw_short'                            => 'If you just entered the password you always use: <em>Please yes</em>.',


    // attachments
@ -520,6 +530,7 @@ Sollen zusätzlich Ihre Girokonten angezeigt werden?',
    'update_amount'                              => 'Betrag aktualisieren',
    'update_budget'                              => 'Budget aktualisieren',
    'update_budget_amount_range'                 => 'Aktualisiere (erwarteten) verfügbaren Betrag zwischen :start und :end',
+    'budget_period_navigator'                    => 'Period navigator',

    // bills:
    'matching_on'                                => 'Reagiert auf',
--- a/resources/lang/es_ES/firefly.php
+++ b/resources/lang/es_ES/firefly.php
@ -416,6 +416,16 @@ return [
    'password_changed'                           => 'Password changed!',
    'should_change'                              => 'The idea is to change your password.',
    'invalid_password'                           => 'Invalid password!',
+    'what_is_pw_security'                        => 'What is "verify password security"?',
+    'secure_pw_title'                            => 'How to choose a secure password',
+    'secure_pw_history'                          => 'In August 2017 well known security researcher Troy Hunt released a list of 306 million stolen passwords. These passwords were stolen during breakins at companies like LinkedIn, Adobe and NeoPets (and many more).',
+    'secure_pw_check_box'                        => 'By checking the box, Firefly III will send the SHA1 hash of your password to <a href="https://www.troyhunt.com/introducing-306-million-freely-downloadable-pwned-passwords/">the website of Troy Hunt</a> to see if it is on the list. This will stop you from using unsafe passwords as is recommended in the latest <a href="https://pages.nist.gov/800-63-3/sp800-63b.html">NIST Special Publication</a> on this subject.',
+    'secure_pw_sha1'                             => 'But I thought SHA1 was broken?',
+    'secure_pw_hash_speed'                       => 'Yes, but not in this context. As you can read on <a href="https://shattered.io/">the website detailing how they broke SHA1</a>, it is now slightly easier to find a "collision": another string that results in the same SHA1-hash. It now only takes 10,000 years using a single-GPU machine.',
+    'secure_pw_hash_security'                    => 'This collision would not be equal to your password, nor would it be useful on (a site like) Firefly III. This application does not use SHA1 for password verification. So it is safe to check this box. Your password is hashed and sent over HTTPS.',
+    'secure_pw_should'                           => 'Should I check the box?',
+    'secure_pw_long_password'                    => 'If you just generated a long, single-use password for Firefly III using some kind of password generator: <strong>no</strong>.',
+    'secure_pw_short'                            => 'If you just entered the password you always use: <em>Please yes</em>.',


    // attachments
@ -519,6 +529,7 @@ return [
    'update_amount'                              => 'Update amount',
    'update_budget'                              => 'Update budget',
    'update_budget_amount_range'                 => 'Update (expected) available amount between :start and :end',
+    'budget_period_navigator'                    => 'Period navigator',

    // bills:
    'matching_on'                                => 'Matching on',
--- a/resources/lang/fr_FR/firefly.php
+++ b/resources/lang/fr_FR/firefly.php
@ -416,6 +416,16 @@ return [
    'password_changed'                           => 'Mot de passe modifié!',
    'should_change'                              => 'L’idée est de changer votre mot de passe.',
    'invalid_password'                           => 'Mot de passe incorrect!',
+    'what_is_pw_security'                        => 'What is "verify password security"?',
+    'secure_pw_title'                            => 'How to choose a secure password',
+    'secure_pw_history'                          => 'In August 2017 well known security researcher Troy Hunt released a list of 306 million stolen passwords. These passwords were stolen during breakins at companies like LinkedIn, Adobe and NeoPets (and many more).',
+    'secure_pw_check_box'                        => 'By checking the box, Firefly III will send the SHA1 hash of your password to <a href="https://www.troyhunt.com/introducing-306-million-freely-downloadable-pwned-passwords/">the website of Troy Hunt</a> to see if it is on the list. This will stop you from using unsafe passwords as is recommended in the latest <a href="https://pages.nist.gov/800-63-3/sp800-63b.html">NIST Special Publication</a> on this subject.',
+    'secure_pw_sha1'                             => 'But I thought SHA1 was broken?',
+    'secure_pw_hash_speed'                       => 'Yes, but not in this context. As you can read on <a href="https://shattered.io/">the website detailing how they broke SHA1</a>, it is now slightly easier to find a "collision": another string that results in the same SHA1-hash. It now only takes 10,000 years using a single-GPU machine.',
+    'secure_pw_hash_security'                    => 'This collision would not be equal to your password, nor would it be useful on (a site like) Firefly III. This application does not use SHA1 for password verification. So it is safe to check this box. Your password is hashed and sent over HTTPS.',
+    'secure_pw_should'                           => 'Should I check the box?',
+    'secure_pw_long_password'                    => 'If you just generated a long, single-use password for Firefly III using some kind of password generator: <strong>no</strong>.',
+    'secure_pw_short'                            => 'If you just entered the password you always use: <em>Please yes</em>.',


    // attachments
@ -519,6 +529,7 @@ return [
    'update_amount'                              => 'Mettre à jour le montant',
    'update_budget'                              => 'Mettre à jour le budget',
    'update_budget_amount_range'                 => 'Mettre à jour le montant disponible (prévu) entre le :start et le :end',
+    'budget_period_navigator'                    => 'Period navigator',

    // bills:
    'matching_on'                                => 'Matching on',
--- a/resources/lang/nl_NL/csv.php
+++ b/resources/lang/nl_NL/csv.php
@ -17,7 +17,7 @@ return [
    'initial_title'                 => 'Importinstellingen (1/3) - Algemene CVS importinstellingen',
    'initial_text'                  => 'Om je bestand goed te kunnen importeren moet je deze opties verifiëren.',
    'initial_box'                   => 'Algemene CVS importinstellingen',
-    'initial_box_title'             => 'Basic CSV import setup options',
+    'initial_box_title'             => 'Algemene CVS importinstellingen',
    'initial_header_help'           => 'Vink hier als de eerste rij kolomtitels bevat.',
    'initial_date_help'             => 'Datum/tijd formaat in jouw CSV bestand. Volg het formaat zoals ze het <a href="https://secure.php.net/manual/en/datetime.createfromformat.php#refsect1-datetime.createfromformat-parameters">op deze pagina</a> uitleggen. Het standaardformaat ziet er zo uit: :dateExample.',
    'initial_delimiter_help'        => 'Kies het veldscheidingsteken dat in jouw bestand wordt gebruikt. Als je het niet zeker weet, is de komma de beste optie.',
@ -35,7 +35,7 @@ return [
    'roles_column'                  => 'Kolom',
    'roles_no_example_data'         => 'Geen voorbeeldgegevens',
    'roles_submit'                  => 'Ga verder met stap 3/3',
-    'roles_warning'                 => 'At the very least, mark one column as the amount-column. It is advisable to also select a column for the description, date and the opposing account.',
+    'roles_warning'                 => 'Geef minstens de kolom aan waar het bedrag in staat. Als het even kan, ook een kolom voor de omschrijving, datum en de andere rekening.',

    // map data
    'map_title'                     => 'Importinstellingen (3/3) - Link importgegevens aan Firefly III-gegevens',
--- a/resources/lang/nl_NL/firefly.php
+++ b/resources/lang/nl_NL/firefly.php
@ -416,6 +416,16 @@ return [
    'password_changed'                           => 'Je wachtwoord is veranderd!',
    'should_change'                              => 'Vul ook echt een ander wachtwoord in.',
    'invalid_password'                           => 'Ongeldig wachtwoord!',
+    'what_is_pw_security'                        => 'Wat is "Bevestig wachtwoordsterkte"?',
+    'secure_pw_title'                            => 'Hoe kies je een veilig wachtwoord',
+    'secure_pw_history'                          => 'De bekende security onderzoeker Troy Hunt gaf in augustus 2017 een lijst vrij van 306 miljoen gestolen wachtwoorden. Deze wachtwoorden waren gestolen tijdens hacks van bekende bedrijven zoals LinkedIn, Adobe en NeoPets (en vele anderen).',
+    'secure_pw_check_box'                        => 'Zet het vinkje, en Firefly III stuurt de SHA1-hash van je wachtwoord naar <a href="https://www.troyhunt.com/introducing-306-million-freely-downloadable-pwned-passwords/">de website van Troy Hunt</a> om te zien of-ie op de lijst staat. Dit voorkomt dat je een onveilig wachtwoord gebruikt, zoals is voorgeschreven in <a href="https://pages.nist.gov/800-63-3/sp800-63b.html">een speciale publicatie van het NIST</a> over dit onderwerp.',
+    'secure_pw_sha1'                             => 'Maar SHA1 is toch gebroken?',
+    'secure_pw_hash_speed'                       => 'Ja, maar niet in deze context. Zoals je kan lezen op <a href="https://shattered.io/">de website over SHA1</a> is het nu makkelijker geworden om een "collision" te vinden: twee stukken tekst die dezelfde SHA1-hash opleveren. Dit kan nu in 10.000 jaar op een machine met één grafische kaart.',
+    'secure_pw_hash_security'                    => 'Deze collision is niet gelijk aan jouw wachtwoord, noch is deze te gebruiken op een site (zoals) Firefly III. Deze app gebruikt geen SHA1 voor wachtwoordverificatie. Dat maakt het veilig om de checkbox aan te vinken. Je wachtwoord wordt gehasht en verstuurt over HTTPS.',
+    'secure_pw_should'                           => 'Vinkje zetten of niet?',
+    'secure_pw_long_password'                    => 'Als je net een lang wachtwoord hebt gegenereerd met een password generator tool: <strong>nee</strong>.',
+    'secure_pw_short'                            => 'Gebruik je het wachtwoord dat je altijd gebruikt? <em>Ja, doen!</em>',


    // attachments
@ -519,6 +529,7 @@ return [
    'update_amount'                              => 'Bedrag bijwerken',
    'update_budget'                              => 'Budget bijwerken',
    'update_budget_amount_range'                 => 'Update het verwacht beschikbare bedrag tussen :start en :end',
+    'budget_period_navigator'                    => 'Periodenavigator',

    // bills:
    'matching_on'                                => 'Wordt herkend',
@ -966,8 +977,8 @@ return [
    // import index page:
    'import_index_title'                    => 'Gegevens importeren in Firefly III',
    'import_index_sub_title'                => 'Index',
-    'import_general_index_intro'            => 'Welcome to Firefly\'s import routine. There are a few ways of importing data into Firefly III, displayed here as buttons.',
-    'import_index_intro'                    => 'This routine will help you import files from your bank into Firefly III. Please check out the help pages in the top right corner.',
+    'import_general_index_intro'            => 'Dit is de import-routine van Firefly. Er zijn verschillende manieren om gegevens te importeren in Firefly III, hier als knoppen weergegeven.',
+    'import_index_intro'                    => 'Deze pagina\'s helpen je bestanden van je bank te importeren in Firefly III. Gebruik de hulp-pagina\'s linksboven voor meer informatie.',
    'import_index_file'                     => 'Selecteer je bestand',
    'import_index_config'                   => 'Als je eerder gegevens hebt geïmporteerd in Firefly III, heb je wellicht een configuratiebestand, dat een aantal zaken alvast voor je kan instellen. Voor bepaalde banken hebben andere gebruikers uit de liefde van hun hart het benodigde <a href="https://github.com/firefly-iii/import-configurations/wiki">configuratiebestand</a> gedeeld.',
    'import_index_type'                     => 'Selecteer het type bestand dat je zal uploaden',
--- a/resources/lang/nl_NL/form.php
+++ b/resources/lang/nl_NL/form.php
@ -32,7 +32,7 @@ return [
    'journal_source_account_name'    => 'Debiteur (bron)',
    'journal_source_account_id'      => 'Betaalrekening (bron)',
    'BIC'                            => 'BIC',
-    'verify_password'                => 'Verify password security',
+    'verify_password'                => 'Bevestig wachtwoordsterkte',
    'account_from_id'                => 'Van account',
    'account_to_id'                  => 'Naar account',
    'source_account'                 => 'Bronrekening',
--- a/resources/lang/nl_NL/validation.php
+++ b/resources/lang/nl_NL/validation.php
@ -88,5 +88,5 @@ return [
    'in_array'                       => 'Het :attribute veld bestaat niet in :other.',
    'present'                        => 'Het :attribute veld moet aanwezig zijn.',
    'amount_zero'                    => 'Het totaalbedrag kan niet nul zijn',
-    'secure_password'                => 'This is not a secure password. Please try again. For more information, visit https://goo.gl/NCh2tN',
+    'secure_password'                => 'Dit is geen sterk wachtwoord. Probeer het nog een keer. Zie ook: https://goo.gl/NCh2tN',
 ];
--- a/resources/lang/pl_PL/firefly.php
+++ b/resources/lang/pl_PL/firefly.php
@ -416,6 +416,16 @@ return [
    'password_changed'                           => 'Hasło zostało zmienione!',
    'should_change'                              => 'Chodzi o to, aby zmienić swoje hasło.',
    'invalid_password'                           => 'Nieprawidłowe hasło!',
+    'what_is_pw_security'                        => 'What is "verify password security"?',
+    'secure_pw_title'                            => 'How to choose a secure password',
+    'secure_pw_history'                          => 'In August 2017 well known security researcher Troy Hunt released a list of 306 million stolen passwords. These passwords were stolen during breakins at companies like LinkedIn, Adobe and NeoPets (and many more).',
+    'secure_pw_check_box'                        => 'By checking the box, Firefly III will send the SHA1 hash of your password to <a href="https://www.troyhunt.com/introducing-306-million-freely-downloadable-pwned-passwords/">the website of Troy Hunt</a> to see if it is on the list. This will stop you from using unsafe passwords as is recommended in the latest <a href="https://pages.nist.gov/800-63-3/sp800-63b.html">NIST Special Publication</a> on this subject.',
+    'secure_pw_sha1'                             => 'But I thought SHA1 was broken?',
+    'secure_pw_hash_speed'                       => 'Yes, but not in this context. As you can read on <a href="https://shattered.io/">the website detailing how they broke SHA1</a>, it is now slightly easier to find a "collision": another string that results in the same SHA1-hash. It now only takes 10,000 years using a single-GPU machine.',
+    'secure_pw_hash_security'                    => 'This collision would not be equal to your password, nor would it be useful on (a site like) Firefly III. This application does not use SHA1 for password verification. So it is safe to check this box. Your password is hashed and sent over HTTPS.',
+    'secure_pw_should'                           => 'Should I check the box?',
+    'secure_pw_long_password'                    => 'If you just generated a long, single-use password for Firefly III using some kind of password generator: <strong>no</strong>.',
+    'secure_pw_short'                            => 'If you just entered the password you always use: <em>Please yes</em>.',


    // attachments
@ -519,6 +529,7 @@ return [
    'update_amount'                              => 'Aktualizuj kwotę',
    'update_budget'                              => 'Aktualizuj budżet',
    'update_budget_amount_range'                 => 'Update (expected) available amount between :start and :end',
+    'budget_period_navigator'                    => 'Period navigator',

    // bills:
    'matching_on'                                => 'Matching on',
--- a/resources/lang/pt_BR/firefly.php
+++ b/resources/lang/pt_BR/firefly.php
@ -416,6 +416,16 @@ return [
    'password_changed'                           => 'Senha alterada!',
    'should_change'                              => 'A idéia é alterar sua senha.',
    'invalid_password'                           => 'Senha inválida!',
+    'what_is_pw_security'                        => 'What is "verify password security"?',
+    'secure_pw_title'                            => 'How to choose a secure password',
+    'secure_pw_history'                          => 'In August 2017 well known security researcher Troy Hunt released a list of 306 million stolen passwords. These passwords were stolen during breakins at companies like LinkedIn, Adobe and NeoPets (and many more).',
+    'secure_pw_check_box'                        => 'By checking the box, Firefly III will send the SHA1 hash of your password to <a href="https://www.troyhunt.com/introducing-306-million-freely-downloadable-pwned-passwords/">the website of Troy Hunt</a> to see if it is on the list. This will stop you from using unsafe passwords as is recommended in the latest <a href="https://pages.nist.gov/800-63-3/sp800-63b.html">NIST Special Publication</a> on this subject.',
+    'secure_pw_sha1'                             => 'But I thought SHA1 was broken?',
+    'secure_pw_hash_speed'                       => 'Yes, but not in this context. As you can read on <a href="https://shattered.io/">the website detailing how they broke SHA1</a>, it is now slightly easier to find a "collision": another string that results in the same SHA1-hash. It now only takes 10,000 years using a single-GPU machine.',
+    'secure_pw_hash_security'                    => 'This collision would not be equal to your password, nor would it be useful on (a site like) Firefly III. This application does not use SHA1 for password verification. So it is safe to check this box. Your password is hashed and sent over HTTPS.',
+    'secure_pw_should'                           => 'Should I check the box?',
+    'secure_pw_long_password'                    => 'If you just generated a long, single-use password for Firefly III using some kind of password generator: <strong>no</strong>.',
+    'secure_pw_short'                            => 'If you just entered the password you always use: <em>Please yes</em>.',


    // attachments
@ -519,6 +529,7 @@ return [
    'update_amount'                              => 'Atualizar quantia',
    'update_budget'                              => 'Atualizar Orçamento',
    'update_budget_amount_range'                 => 'Atualizar quantia disponível (esperada) entre :start e :end',
+    'budget_period_navigator'                    => 'Period navigator',

    // bills:
    'matching_on'                                => 'Corresponde em',
--- a/resources/lang/ru_RU/firefly.php
+++ b/resources/lang/ru_RU/firefly.php
@ -416,6 +416,16 @@ return [
    'password_changed'                           => 'Пароль изменён!',
    'should_change'                              => 'Кажется, нужно изменить пароль.',
    'invalid_password'                           => 'Неверный пароль!',
+    'what_is_pw_security'                        => 'What is "verify password security"?',
+    'secure_pw_title'                            => 'How to choose a secure password',
+    'secure_pw_history'                          => 'In August 2017 well known security researcher Troy Hunt released a list of 306 million stolen passwords. These passwords were stolen during breakins at companies like LinkedIn, Adobe and NeoPets (and many more).',
+    'secure_pw_check_box'                        => 'By checking the box, Firefly III will send the SHA1 hash of your password to <a href="https://www.troyhunt.com/introducing-306-million-freely-downloadable-pwned-passwords/">the website of Troy Hunt</a> to see if it is on the list. This will stop you from using unsafe passwords as is recommended in the latest <a href="https://pages.nist.gov/800-63-3/sp800-63b.html">NIST Special Publication</a> on this subject.',
+    'secure_pw_sha1'                             => 'But I thought SHA1 was broken?',
+    'secure_pw_hash_speed'                       => 'Yes, but not in this context. As you can read on <a href="https://shattered.io/">the website detailing how they broke SHA1</a>, it is now slightly easier to find a "collision": another string that results in the same SHA1-hash. It now only takes 10,000 years using a single-GPU machine.',
+    'secure_pw_hash_security'                    => 'This collision would not be equal to your password, nor would it be useful on (a site like) Firefly III. This application does not use SHA1 for password verification. So it is safe to check this box. Your password is hashed and sent over HTTPS.',
+    'secure_pw_should'                           => 'Should I check the box?',
+    'secure_pw_long_password'                    => 'If you just generated a long, single-use password for Firefly III using some kind of password generator: <strong>no</strong>.',
+    'secure_pw_short'                            => 'If you just entered the password you always use: <em>Please yes</em>.',


    // attachments
@ -519,6 +529,7 @@ return [
    'update_amount'                              => 'Update amount',
    'update_budget'                              => 'Update budget',
    'update_budget_amount_range'                 => 'Update (expected) available amount between :start and :end',
+    'budget_period_navigator'                    => 'Period navigator',

    // bills:
    'matching_on'                                => 'Matching on',
--- a/resources/lang/sl_SI/firefly.php
+++ b/resources/lang/sl_SI/firefly.php
@ -416,6 +416,16 @@ return [
    'password_changed'                           => 'Password changed!',
    'should_change'                              => 'The idea is to change your password.',
    'invalid_password'                           => 'Invalid password!',
+    'what_is_pw_security'                        => 'What is "verify password security"?',
+    'secure_pw_title'                            => 'How to choose a secure password',
+    'secure_pw_history'                          => 'In August 2017 well known security researcher Troy Hunt released a list of 306 million stolen passwords. These passwords were stolen during breakins at companies like LinkedIn, Adobe and NeoPets (and many more).',
+    'secure_pw_check_box'                        => 'By checking the box, Firefly III will send the SHA1 hash of your password to <a href="https://www.troyhunt.com/introducing-306-million-freely-downloadable-pwned-passwords/">the website of Troy Hunt</a> to see if it is on the list. This will stop you from using unsafe passwords as is recommended in the latest <a href="https://pages.nist.gov/800-63-3/sp800-63b.html">NIST Special Publication</a> on this subject.',
+    'secure_pw_sha1'                             => 'But I thought SHA1 was broken?',
+    'secure_pw_hash_speed'                       => 'Yes, but not in this context. As you can read on <a href="https://shattered.io/">the website detailing how they broke SHA1</a>, it is now slightly easier to find a "collision": another string that results in the same SHA1-hash. It now only takes 10,000 years using a single-GPU machine.',
+    'secure_pw_hash_security'                    => 'This collision would not be equal to your password, nor would it be useful on (a site like) Firefly III. This application does not use SHA1 for password verification. So it is safe to check this box. Your password is hashed and sent over HTTPS.',
+    'secure_pw_should'                           => 'Should I check the box?',
+    'secure_pw_long_password'                    => 'If you just generated a long, single-use password for Firefly III using some kind of password generator: <strong>no</strong>.',
+    'secure_pw_short'                            => 'If you just entered the password you always use: <em>Please yes</em>.',


    // attachments
@ -519,6 +529,7 @@ return [
    'update_amount'                              => 'Update amount',
    'update_budget'                              => 'Update budget',
    'update_budget_amount_range'                 => 'Update (expected) available amount between :start and :end',
+    'budget_period_navigator'                    => 'Period navigator',

    // bills:
    'matching_on'                                => 'Matching on',
--- a/resources/lang/zh_TW/firefly.php
+++ b/resources/lang/zh_TW/firefly.php
@ -416,6 +416,16 @@ return [
    'password_changed'                           => 'Password changed!',
    'should_change'                              => 'The idea is to change your password.',
    'invalid_password'                           => 'Invalid password!',
+    'what_is_pw_security'                        => 'What is "verify password security"?',
+    'secure_pw_title'                            => 'How to choose a secure password',
+    'secure_pw_history'                          => 'In August 2017 well known security researcher Troy Hunt released a list of 306 million stolen passwords. These passwords were stolen during breakins at companies like LinkedIn, Adobe and NeoPets (and many more).',
+    'secure_pw_check_box'                        => 'By checking the box, Firefly III will send the SHA1 hash of your password to <a href="https://www.troyhunt.com/introducing-306-million-freely-downloadable-pwned-passwords/">the website of Troy Hunt</a> to see if it is on the list. This will stop you from using unsafe passwords as is recommended in the latest <a href="https://pages.nist.gov/800-63-3/sp800-63b.html">NIST Special Publication</a> on this subject.',
+    'secure_pw_sha1'                             => 'But I thought SHA1 was broken?',
+    'secure_pw_hash_speed'                       => 'Yes, but not in this context. As you can read on <a href="https://shattered.io/">the website detailing how they broke SHA1</a>, it is now slightly easier to find a "collision": another string that results in the same SHA1-hash. It now only takes 10,000 years using a single-GPU machine.',
+    'secure_pw_hash_security'                    => 'This collision would not be equal to your password, nor would it be useful on (a site like) Firefly III. This application does not use SHA1 for password verification. So it is safe to check this box. Your password is hashed and sent over HTTPS.',
+    'secure_pw_should'                           => 'Should I check the box?',
+    'secure_pw_long_password'                    => 'If you just generated a long, single-use password for Firefly III using some kind of password generator: <strong>no</strong>.',
+    'secure_pw_short'                            => 'If you just entered the password you always use: <em>Please yes</em>.',


    // attachments
@ -519,6 +529,7 @@ return [
    'update_amount'                              => 'Update amount',
    'update_budget'                              => 'Update budget',
    'update_budget_amount_range'                 => 'Update (expected) available amount between :start and :end',
+    'budget_period_navigator'                    => 'Period navigator',

    // bills:
    'matching_on'                                => 'Matching on',