• roofuskit@kbin.social
    link
    fedilink
    arrow-up
    3
    ·
    1 year ago

    Nothing enrages me more than a password character limit. Thank you for making sure my password is LESS secure with your idiotic requirements based on security recommendations that are at least a decade old.

    • Ambiorickx@lemmy.world
      link
      fedilink
      arrow-up
      3
      ·
      1 year ago

      How about… an undisclosed character limit? We’ll just keep telling you your password is invalid until you figure out the max length.

      • ericjmorey@lemmy.world
        link
        fedilink
        arrow-up
        1
        ·
        edit-2
        1 year ago

        Fun fact, this is a feature of Lemmy:

        • Lemmy has an undisclosed password limit of 60 characters.
        • Lemmy’s signup form will silently truncate passwords longer than 60 characters to 60 characters.
        • Lemmy’s login form will crash when passwords longer than 60 characters are submitted.

        Someone please submit a PR

    • Acetamide@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      1 year ago

      Way too often I’ve had websites complain that the input password is too complex, and I have to dial down the settings.

  • KaeruCT@programming.dev
    link
    fedilink
    arrow-up
    1
    ·
    1 year ago

    My bank requires your password to contain NO vowels. I always forget when I update the password (forced to every 3 months) and the error never mentions it.

    • zarp86@sh.itjust.works
      link
      fedilink
      arrow-up
      1
      ·
      1 year ago

      I’m struggling to think why this would be a thing. The only guess I have is someone was told to enforce “no dictionary words in a password” and saw that as an ‘easier’ way to implement?