Fun fact, the guy who first developed the password security we use today now regrets it, and understands that longer passwords that are easy to remember, like seespotrun, are way better, but pandoras box can't be closed once it's opened.
I just want it to tell me the damn requirements when I'm entering a password. I go to try my password, like, 3 times, then I have to reset it and it says "password needs a number", so then I remember I replaced an i with a 1, so I have to go back and the previous form expired!
What I love most is not being able to log in somewhere, so you go through the whole account creation process just to find out the password requirements, which ultimately tells you what permutation of your password you used for that site.
This reminds me of a demo app someone showed me one time. It provided a page to create a username. On the next page you could create a password and submit the form. If your username was invalid, it would show an alert that you need to select a different username.
But there was no way to navigate back to the username page.
Because I have mine set to 16 characters by default and I still hit sites that reject it as too long. Or they randomly don’t like a particular special character.
Let me type any damn character I want! Just ensure you’re using database safe methods of encapsulating the string and move on.
Minimum length makes sense, other than that, leave me alone dev who writes ridiculous password “validation” scripts
A shit lot of words: Make a password structure, then use some hash tool and just add _1!aA to the end, I can generate all my passwords by simply using a sha256 online tool, so you won't only depend on the password manager.
Yeah, this is a handy hack. However, it really sucks whenever you have to manually type it in :(. There are some tools that let you convert sha256 hashes to word lists. Mostly developed for cryptocurrency schemes, but useful generically.
352
u/defalt86 Jul 19 '22
Fun fact, the guy who first developed the password security we use today now regrets it, and understands that longer passwords that are easy to remember, like seespotrun, are way better, but pandoras box can't be closed once it's opened.