2 ms·

I created an issue for this, but one really dumb thing is inconsistent password verification. Bestbuy will let you use anything for a password but on login real

by dawnerd 10y ago

I created an issue for this, but one really dumb thing is inconsistent password verification. Bestbuy will let you use anything for a password but on login really long passwords will trip it up. Been able to reproduce it a few times with 64 character passwords generated from 1pass.

aggie 10y ago
Why use a 64-character password? This post suggests more than ~21 random characters (128 bits) doesn't get you extra (practical) security: https://security.stackexchange.com/questions/33196/is-there-a-length-beyond-which-increasing-password-length-provides-no-additional https://security.stackexchange.com/questions/33196/is-there-...
- dawnerd 10y ago
  No good reason other than they let me. My thinking is, if you're going to let me put anything in then your system should work with that. If it's going to break at n characters then cap the length.