161–170 of 327 posts
Of course, we have to use these passwords in quite a few circumstances where a password manager cannot be used (logging on to random terminals, etc.), and then there is the multiple random 2FA checks, in buildings that have no cell signal...
Sites that go to lengths to block paste should burn. I use a password manager, and copying the pass manually feels so damn 1970s. Or I can try to diddle around in Developer Tools and try to unfoobar the paste.
Hi, I made this. It seems like most of you are as enraged as I am about some of these password rules. They just flat out make me mad. It's not much, but I've actually had one company reach out to me after making it on the list and they made their password rules less dumb. So, if you find any particularly egregious offenders, do your part and submit a PR. It may actually make a difference.
Many complaints are that non-ASCII characters (which all but one European languages have natively) are not allowed. While I agree that allowing them would be good for password security past experience has made me paranoid. Not all systems handle non-ASCII the same way, so when you change browsers or they upgrade their system your password might no longer work. Today Unicode is used a lot so it gets better, but it's s…
Brilliant.
What I don't understand is why sites use a maximum password length. They shouldn't save your password anyway, and only compare the hash, right?
I understand that you follow some misguided security guidelines that state that a password must contain special characters and have a length of at least X. What I don't understand is why sites use a maximum password length. They shouldn't save your password anyway, and only compare the hash, right?