Just yesterday my library required a new password. The password requirements were:

• 8 to 18 characters
• uppercase
• lowercase
• number
• one of the 8 special characters listed

When borrowing from the library physically, I need to enter this password on a touchscreen keypad. So no copy and paste from a password manager.

They used to have birthdates as the assigned password for everyone. If you request a password reset, it resets to the birthdate. You have to change it on first login.

A little better than before, but doesn’t feel secure.

On the other hand, abuse is kinda difficult.

For physically loaning books, you need the library card with its RFID chip. For anything digital, there’s no incentive or possibility for abuse really.