261
Largest Study of its Kind Shows Outdated Password Practices are Widespread
(www.cc.gatech.edu)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 27 Nov 2023
261 points (97.5% liked)
Technology
59414 readers
1644 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
I am tired of websites imposing limitations on passwords, but not sharing what those are. I use a password generator, and rarely know if Unicode characters are allowed, if there's a limit on the number of characters, etc.
I've come across websites where dashes "-" are forbidden. My banking website only allows a maximum of 16 characters. Sometimes there's a note below the password box, sometimes they don't tell you until your password fails, and sometimes they don't ever tell you. If I don't know what the restrictions are, I'll end up throwing a cheap password at it until I can find out what's acceptable.
Sometimes the limits they tell you are wrong. Sometimes they truncate your password without telling you. Sometimes the app has different requirements than the website.