3 ms·
Ask HN: Why do websites let people make their own passwords?
Presumably the password should be unique and the most secure way to make a password is to properly generate one.
So why don't websites just do it for their users and disallow people making up their own passwords?
- skaplun 10y agoreally? Because websites want customers to remember their passwords and come back to the service.
- hoodoof 10y agoAnd all the sites nag you to include a capital, a non alpha and a number blah blah. How is that different?
- skaplun 10y agoIfreakingrock! instead of ifreakingrock, inputted by you with some meaning to you, is far easier to remember than "Yz52356Dde.."
- CyberFonic 10y agoSeveral years ago I worked at a company where the system generated uncrackable passwords. They were random jumble of letters and numbers. Nobody could remember them, so guess what? Most people had theirs written on a PostIt note and stuck to their screen or on a slip of paper in their top drawer. Almost as good as leaving the front door key under the mat.
- anondon 10y agoHow will the users remember complex passwords? By using password managers. So you should probably be asking, why isn't everyone using password managers. Maybe it's because of inconvenience, laziness, not caring or any combination of the three factors.
- onion2k 10y agoThis is why: <?php function generateNewUserPassword() { //A really secure password! return "4kSj7BFq5ry992xUB$3V33eDkPe*9Et56YKWcu!G^fbEj@Db6bCHDeN4&4V6FG!rYCe2Xx2hDWnAjb$F"; } ?> Everyone gets the same password, but it looks secure. As a user, you really shouldn't trust that the person who developed a website you're using is competent. You certainly shouldn't trust them to generate security credentials for you.