Comment on Please create a non-secure password.

slazer2au@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

• orclev@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

  Go all in, 1024 character password.

  source

  • SanctimoniousApe@lemmings.world ⁨2⁩ ⁨weeks⁩ ago

    They’ll accept it, but won’t tell you they ignored everything after character n, and their login page won’t take anything but the “correct” password so you’ll be spending some time figuring out the actual character count limit…

    source

    • IDKWhatUsernametoPutHereLolol@lemmy.dbzer0.com ⁨2⁩ ⁨weeks⁩ ago

      No, they’ll accept it. Then on the log in page tell you the max limit is X, even though on the password creation page, the password length you used was X+Y

      source

      • Sir_Kevin@lemmy.dbzer0.com ⁨2⁩ ⁨weeks⁩ ago

        I have experienced this far too many times.

        source
    • Moonrise2473@feddit.it ⁨2⁩ ⁨weeks⁩ ago

      Fucking MICROSOFT did that with Hotmail

      source

      • Kazumara@discuss.tchncs.de ⁨1⁩ ⁨week⁩ ago

        Not a big surprise, they did the same with Windows 98. Everything after the first 14 was silently dropped.

        source
    • Kyatto@leminal.space ⁨1⁩ ⁨week⁩ ago

      Even worse the password was accepted in full when registered, but the login field won’t accept the full length.

      source
  • frezik@midwest.social ⁨1⁩ ⁨week⁩ ago

    Bcrypt/Scrypt have a 72 byte limit. Developers can get around that by putting it through a regular hash first, but that’s not common.

    source
• stevedice@sh.itjust.works ⁨1⁩ ⁨week⁩ ago

  My previous bank forced 8 characters with only numbers and letters.

  source