News for hackers. Stuff that matters.

A comment on Gmail password first character is case insensitive on mobile device. Parent comment

Re:Gmail password first character is case insensitive on mob... by Ginden on Saturday October 09, 2021 @09:09AM (#28809539)
The worst rule that I have seen was that you can't have the same character next to each other.

So "Pasword1234#" was "strong" password, but "ha_ivrkbs(i5HzJzee%Ii3jsk#7jaot" was considered weak - note "ee" in the middle of string.

[ Parent | on HN ]
Re:Gmail password first character is case insensitive on mob... by saganus on Saturday October 09, 2021 @10:04AM (#28809930)
A bank I used in the past does that AND also does not allow you to set consecutive numbers that increase or decrease, e.g. 12, 34, 87, etc.

No idea how maby bits of entropy it removes but it's absurd.

[ Parent | on HN ]