In password security, the longer the better. With a password manager, using more than 24 characters is simple. Unless, of course, the secure password is not accepted due to its length. (In this case, through STOVE.)

Possibly indicating cleartext storage of a limited field (which is an absolute no-go), or suboptimal or lacking security practices.

  • The Infinite Nematode
    link
    fedilink
    English
    376 days ago

    My mum told be the other day she logged onto a new bank, gave it a 12 character password then couldn’t get back in after. When she got through to their customer services they said that it was an 8 character password limit (!), but it just never said on the register screen.

    • @[email protected]
      link
      fedilink
      English
      23
      edit-2
      6 days ago

      Yeah, I’d be doing that bank if there’s any choice.

      Edit: Leaving (my attention got taken away as I posted)

    • @[email protected]
      link
      fedilink
      English
      86 days ago

      Microsoft does this to our users at my job. They go to charge their password and it won’t accept it but won’t tell them what the requirements are. “Your password doesn’t meet our criteria.” Okay, so what are you looking for???

      Worst is that there seems to be a soft block at some point and instead of telling them that, it shows this dumb error instead over and over again no matter what password they choose.