88
submitted 1 year ago* (last edited 1 year ago) by FinancesDrone98@programming.dev to c/programming@programming.dev

Why do so many companies and people say that your password has to be so long and complicated, just to have restrictions?

I am in the process of changing some passwords (I have peen pwnd and it’s the password I use for use-less-er sites) and suddenly they say “password may contain a maximum of 15 characters“… I mean, 15 is long but it’s nothing for a password manager.

And then there’s the problem with special characters like äàáâæãåā ñ ī o ė ß ÿ ç just to name a few, or some even won’t let you type a [space] in them. Why is that? Is it bad programming? Or just a symptom of copy-pasta?

you are viewing a single comment's thread
view the rest of the comments
[-] foo@withachanceof.com 73 points 1 year ago

Is it bad programming?

With very few exceptions, yes. There should be no restrictions on characters used/length of password (within reason) if you're storing passwords correctly.

[-] Aurenkin@sh.itjust.works 22 points 1 year ago* (last edited 1 year ago)

A very high max of something like 500 characters just to make sure you don't get DOSed by folks hitting your endpoint with huge packets of data is about the most I would expect in terms of length restrictions. I'm not a security expert or anything though.

[-] foo@withachanceof.com 5 points 1 year ago* (last edited 1 year ago)

Right, that's why I put the "within reason" in my comment. You still need to guard against malicious inputs so ultimately there is some max length limit, but it should be way beyond what a reasonable password length would be.

My password is the bee movie script

load more comments (9 replies)
load more comments (13 replies)
this post was submitted on 23 Aug 2023
88 points (97.8% liked)

Programming

16971 readers
251 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities !webdev@programming.dev



founded 1 year ago
MODERATORS