3 ms·
You can satisfy most entropy requirements without even trying by using a password manager's "create random password" feature. I feel the more important thing t
by bhauer 8y ago
You can satisfy most entropy requirements without even trying by using a password manager's "create random password" feature. I feel the more important thing to attack is making password management more approachable to laypeople.
To your point though: the most bothersome constraint put on passwords by applications and web sites are limits such as restricting certain special characters (To what end? You're going to hash it anyway, so why limit my special characters? You are going to hash it, right?) and limiting password length to something surprisingly short like 16 characters.
- creeble 8y agoPassword manager? That's what I'm trying to eliminate because they are inconvenient. But I totally agree with your point about limiting special characters and length.
- TremendousJudge 8y agomy _bank_ requires passwords to be exactly 8 characters and is case insensitive. when I first realized I literally couldn't believe it, it's infuriating
- ajford 8y agoSounds like it might be time to switch banks....
- TremendousJudge 8y agoI know, but it's one of those things that are much easier said than done sadly