Bcrypt/Scrypt have a 72 byte limit. Developers can get around that by putting it through a regular hash first, but that’s not common.
Comment on Please create a non-secure password.
orclev@lemmy.world 4 weeks agoGo all in, 1024 character password.
frezik@midwest.social 4 weeks ago
SanctimoniousApe@lemmings.world 4 weeks ago
They’ll accept it, but won’t tell you they ignored everything after character n, and their login page won’t take anything but the “correct” password so you’ll be spending some time figuring out the actual character count limit…
IDKWhatUsernametoPutHereLolol@lemmy.dbzer0.com 4 weeks ago
No, they’ll accept it. Then on the log in page tell you the max limit is X, even though on the password creation page, the password length you used was X+Y
Sir_Kevin@lemmy.dbzer0.com 4 weeks ago
I have experienced this far too many times.
Moonrise2473@feddit.it 4 weeks ago
Fucking MICROSOFT did that with Hotmail
Kazumara@discuss.tchncs.de 4 weeks ago
Not a big surprise, they did the same with Windows 98. Everything after the first 14 was silently dropped.
Kyatto@leminal.space 4 weeks ago
Even worse the password was accepted in full when registered, but the login field won’t accept the full length.