Re:Ask HN: What are valid reasons for limiting password length?
by jeffblake on Friday November 22, 2013 @02:24PM
(#6783113)
My bank required that I could only use a 6 character alphanumeric password when signing up. Kind of scary, but then again, it made me choose a super random PW like v3Ff78 whereas most all people in that situation would use their same password for everything, such as baseball. Thats my theory anyway
[ Parent
| on HN ]
Re:Ask HN: What are valid reasons for limiting password length?
by wikwocket on Saturday November 23, 2013 @12:50AM
(#6785393)
Even a "super random" 6-character alphanumeric password is not very secure. A brute force algorithm can try the entire space of 6-character strings very quickly. Hopefully they rate-limit login attempts!