Gmail password first character is case insensitive on mobile device
support.google.com
Gmail password first character is case insensitive on mobile device
1–10 of 278 posts
Re: Gmail password first character is case insensitive on mobile device
#2So they hash both versions of the password? Or how does this work?
Re: Gmail password first character is case insensitive on mobile device
#3So they hash both versions of the password? Or how does this work?
They probably just do two password checks.
Re: Gmail password first character is case insensitive on mobile device
#4Re: Gmail password first character is case insensitive on mobile device
#5So they hash both versions of the password? Or how does this work?
They probably just do two password checks.
Yeah we did it this way on an app I worked on in the past, try the verbatim input and then a couple of minor variations in casing if it didn't work.
I've also found that for email fields you need to be careful to normalize the input (trim, casing) as safari had a habit of autocorrecting the first character to be a capital
Re: Gmail password first character is case insensitive on mobile device
#6So they hash both versions of the password? Or how does this work?
They send it once over the wire but salt it twice if the first attempt fails and the request originated from a mobile app.
UX is all around us.
Re: Gmail password first character is case insensitive on mobile device
#7Similarly there are many sites that allow you to log in using `your password` or `your password`.swapcase() (for example, Password123 or pASSWORD123). Automatically trying a variant only costs a single bit of entropy and can greatly reduce login issues
Re: Gmail password first character is case insensitive on mobile device
#8So they hash both versions of the password? Or how does this work?
Sadly it can also mean that they save your password in a form that enables them to read it if they need/want it.
Re: Gmail password first character is case insensitive on mobile device
#9Hijacking this thread to say Batlle.net/Blizzard passwords are case insensitive altogether
Re: Gmail password first character is case insensitive on mobile device
#10So they hash both versions of the password? Or how does this work?
From the first answer:
> Looks like the app is clever enough to try changing the case of the first letter if the first attempt fails.
Still, looks like a compromise between usability and security/reduced password entropy.