Dumb Password Rules

Re:Dumb Password Rules by choward on Monday December 05, 2016 @11:03AM (#13106288)

My favorites are the ones where you can't use more than a certain number of characters or where you can't use special characters.

[ Parent | on HN ]

Re:Dumb Password Rules by stickmangallows on Monday December 05, 2016 @11:56AM (#13106830)

Or when the system truncates a long password during password creation and doesn't tell you. Then when you log in, the full password fails.

[ Parent | on HN ]

Re:Dumb Password Rules by masklinn on Monday December 05, 2016 @11:22AM (#13106486)

http://kottke.org/12/06/the-worlds-worst-password-requiremen...

Sabre Red is great: 7 or 8 characters, no Q, no Z.

[ Parent | on HN ]

Re:Dumb Password Rules by adrr on Monday December 05, 2016 @11:20AM (#13106461)

Amex website had their max password length of 8 characters. Not sure if they changed it. Even if you do have a system constraint, you could just lop off the extra characters and the user wouldn't probably never notice.

[ Parent | on HN ]

Re:Dumb Password Rules by jlgaddis on Monday December 05, 2016 @11:59AM (#13106865)

Mine is way more than eight characters (randomly generated w/ KeePassX), although I haven't tried truncating it to eight and seeing what happens.

[ Parent | on HN ]

Re:Dumb Password Rules by duffn on Monday December 05, 2016 @11:15PM (#13112213)

According to the screen shot in the repo, it's not even case sensitive either.

[ Parent | on HN ]

Re:Dumb Password Rules by yeukhon on Monday December 05, 2016 @11:31AM (#13106570)

Or they say cannot accept repeating characters. Like "2j4lwroiw4lkf9wwjsofserow111" is still bad because of 111.

[ Parent | on HN ]

Re:Dumb Password Rules by drey08 on Monday December 05, 2016 @11:25AM (#13106516)

Like Microsoft account passwords (at least for office 365). I don't understand why they do this.

[ Parent | on HN ]