1. A system, comprising: a set of one or more interfaces configured to receive, from a device operated by a user, input provided by the user comprising: a user identifier; and a credential comprising a plurality of separately parseable words; a set of one or more processors configured to: parse the credential into a set of constituent words; perform one or more of the following checks on the set of constituent words: that each of the constituent words in the set is present in a dictionary; that none of the constituent words in the set is a proper noun; that none of the constituent words in the set is present in a blacklist; that the credential includes at least a threshold number of constituent words; that each individual word in the set is of at least a first threshold length; that the set of constituent words are collectively of at least a second threshold length; that the set of constituent words have at least a threshold entropy; and that a measure of strength determined for the set of constituent words meets a minimum threshold; in response to determining that the set of constituent words satisfy the one or more checks, generate at least one of: a normalized credential at least in part by normalizing one or more of the set of constituent words, wherein normalizing comprises mapping the one or more constituent words to one or more equivalence classes, and wherein equivalence classes are defined such that deviations from constituent words will also be considered acceptable in the event that the deviations are provided by the user in a subsequent authentication process; and a set of acceptable variants of the normalized credential that will also be considered acceptable in the event that an acceptable variant in the set of acceptable variants is provided by the user in a subsequent authentication process, wherein generating the set of acceptable variants comprises determining a plurality of different combinations of subsets of the constituent words of the normalized credential; and store, in a credential set associated with the user identifier, a set of representations corresponding to at least some of the normalized credential and the set acceptable variants as stored enrolled credentials; and a memory coupled to the set of one or more processors and configured to provide the set of one or more processors with instructions.
1. A system, comprising: a set of one or more interfaces configured to receive, from a device operated by a user, input provided by the user comprising: a user identifier; and a credential comprising a plurality of separately parseable words; a set of one or more processors configured to: parse the credential into a set of constituent words; perform one or more of the following checks on the set of constituent words: that each of the constituent words in the set is present in a dictionary; that none of the constituent words in the set is a proper noun; that none of the constituent words in the set is present in a blacklist; that the credential includes at least a threshold number of constituent words; that each individual word in the set is of at least a first threshold length; that the set of constituent words are collectively of at least a second threshold length; that the set of constituent words have at least a threshold entropy; and that a measure of strength determined for the set of constituent words meets a minimum threshold; in response to determining that the set of constituent words satisfy the one or more checks, generate at least one of: a normalized credential at least in part by normalizing one or more of the set of constituent words, wherein normalizing comprises mapping the one or more constituent words to one or more equivalence classes, and wherein equivalence classes are defined such that deviations from constituent words will also be considered acceptable in the event that the deviations are provided by the user in a subsequent authentication process; and a set of acceptable variants of the normalized credential that will also be considered acceptable in the event that an acceptable variant in the set of acceptable variants is provided by the user in a subsequent authentication process, wherein generating the set of acceptable variants comprises determining a plurality of different combinations of subsets of the constituent words of the normalized credential; and store, in a credential set associated with the user identifier, a set of representations corresponding to at least some of the normalized credential and the set acceptable variants as stored enrolled credentials; and a memory coupled to the set of one or more processors and configured to provide the set of one or more processors with instructions. 10. The system of claim 1 , wherein: the set of representations corresponding to at least some of the normalized credential and the set of acceptable variants of the normalized credential are generated by performing a salted cryptographic hash function on at least some of the normalized credential and the set of acceptable variants of the normalized credential; and a set of resulting hash values are stored in the credential set associated with the user identifier as the set of representations, along with a set of corresponding random salt values.