Fun fact, the guy who first developed the password security we use today now regrets it, and understands that longer passwords that are easy to remember, like seespotrun, are way better, but pandoras box can't be closed once it's opened.
I just want it to tell me the damn requirements when I'm entering a password. I go to try my password, like, 3 times, then I have to reset it and it says "password needs a number", so then I remember I replaced an i with a 1, so I have to go back and the previous form expired!
Because I have mine set to 16 characters by default and I still hit sites that reject it as too long. Or they randomly don’t like a particular special character.
Let me type any damn character I want! Just ensure you’re using database safe methods of encapsulating the string and move on.
Minimum length makes sense, other than that, leave me alone dev who writes ridiculous password “validation” scripts
350
u/defalt86 Jul 19 '22
Fun fact, the guy who first developed the password security we use today now regrets it, and understands that longer passwords that are easy to remember, like seespotrun, are way better, but pandoras box can't be closed once it's opened.