Bcrypt/Scrypt have a 72 byte limit. Developers can get around that by putting it through a regular hash first, but that’s not common.
Comment on Please create a non-secure password.
orclev@lemmy.world 3 months agoGo all in, 1024 character password.
frezik@midwest.social 3 months ago
SanctimoniousApe@lemmings.world 3 months ago
They’ll accept it, but won’t tell you they ignored everything after character n, and their login page won’t take anything but the “correct” password so you’ll be spending some time figuring out the actual character count limit…
IDKWhatUsernametoPutHereLolol@lemmy.dbzer0.com 3 months ago
No, they’ll accept it. Then on the log in page tell you the max limit is X, even though on the password creation page, the password length you used was X+Y
Sir_Kevin@lemmy.dbzer0.com 3 months ago
I have experienced this far too many times.
Moonrise2473@feddit.it 3 months ago
Fucking MICROSOFT did that with Hotmail
Kazumara@discuss.tchncs.de 3 months ago
Not a big surprise, they did the same with Windows 98. Everything after the first 14 was silently dropped.
Kyatto@leminal.space 3 months ago
Even worse the password was accepted in full when registered, but the login field won’t accept the full length.