this post was submitted on 18 Aug 2024
845 points (98.8% liked)

Cybersecurity - Memes

1902 readers
4 users here now

Only the hottest memes in Cybersecurity

founded 1 year ago
MODERATORS
 

Last week, I tried to register for a service and was really surprised by a password limit of 16 characters. Why on earth yould you impose such strict limits? Never heard of correct horse battery staple?

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 56 points 1 month ago* (last edited 1 month ago) (4 children)

The worst is when it either won't tell you what the character limit is so you have to just keep lowering it and retrying until it finally works, or when the infrastructure for signing up has a different character limit than the infrastructure for logging in, so you can sign up with a long password but can't actually sign in with it. I once encountered a website that had this issue for both the password AND username so I had to change my password and then contact support to change my username. Absurd.

[–] [email protected] 18 points 1 month ago

I used to manage a system that had a longer character limit on the creation than in the sign in. To fix it, they just let you type in more characters when you signed in but only validated the first 8 anyway. 🤦‍♂️

[–] [email protected] 16 points 1 month ago

Honestly at that point, it's not worth using the service to me if I have to contact support just to sign in.

[–] [email protected] 5 points 1 month ago

I used a service that had password validation on the “current password” field when you update your password. My password had stopped being valid due to a change in their password policy, but I couldn’t fix it because the “update password” form kept saying my current password was invalid. I know — you told me to change it!!!!

[–] [email protected] 3 points 1 month ago

I have had this before, I was so confused for a while.

Made account used my password manager, so I knew the password was correct, went around the loop a few times of "forgot password"; finally shortened form 25 to 16 characters and it just worked.