South African bank advises against the use of password managers

Re:South African bank advises against the use of password ma... by moviuro on Monday August 19, 2019 @11:12AM (#20738437)

That's not true about Paypal though: "Use lower case, upper case, a number, and a special character [like ~!@#$%^&*()_+=?><.,/]." [0]

And even if the character subset is quite small (26 lower case, 26 upper case, 10 digits), it's still good enough if it's completely random and never leaked once. Just max out the password length (start at 32 char) and back track from there.

[0] https://www.paypal.com/us/smarthelp/article/Tips-for-creatin...

[ Parent | on HN ]

Re:South African bank advises against the use of password ma... by 0xffff2 on Monday August 19, 2019 @01:47PM (#20739950)

I find this to be a recurring theme when banking security comes up. Every time I've ever been in a position to check, the specific claims made by HN comments about lackluster bank security practices have not been true. I assume they must have been true at one point, but commenters don't check that they are still true before commenting.

[ Parent | on HN ]

Re:South African bank advises against the use of password ma... by vxNsr on Monday August 19, 2019 @03:28PM (#20740955)

It was true in 2016 when I created my account. it was also true about BoA, they allowed a limited char-set.

[ Parent | on HN ]

Re:South African bank advises against the use of password ma... by vxNsr on Monday August 19, 2019 @03:29PM (#20740968)

That doc isn't dated, but it was true as recently as three years ago.

[ Parent | on HN ]