Re:Top 200 Most Common Passwords
by 0x445442 on Sunday November 27, 2022 @10:16AM
(#33763443)
From what I understand the most secure passwords are phrases one can remember but almost all of the places that require passwords don’t support phrases. Almost all of them have some rule close to “password must be 8-15 characters including 1 uppercase, 1 number and 1 special character”. Why aren’t the requirements something like a 24-128 string?
[ Parent
| on HN ]
Re:Top 200 Most Common Passwords
by paulryanrogers on Sunday November 27, 2022 @01:51PM
(#33765450)
Because some people still want something they can remember and type in a reasonable amount of time. Many of them are also slow typists.
That said, I agree a low upper limit is odd, and ideally it'd check for entropy so a long string of lower case letters would be accepted.