3 ms·

Good thing my bank artificially imposes length restrictions so that my password is exactly between 8-12 characters

• nesky 7y ago
  This aggravates me beyond belief. I have more secure passwords on random sites/accounts than I do on my financial accounts. Why do banks insist on restricting character limits to 12 - 20 characters?
  • outworlder 7y ago
    > Why do banks insist on restricting character limits to 12 - 20 characters? Because they are not hashing your password, therefore it needs to fit in plain text in their database column.
  • citiworse 7y ago
    Citibank is even worse. I use a password manager and have used a 20+ character password for years. Every now and then, as happened a few months ago, they change the website in a way that breaks long passwords. So even though my password manager entered it correctly, it rejected my password until I had to reset it.
    • seandougall 7y ago
      Same. At least they fixed the issue (years ago, to be fair) where you could log into your Citibank account and tweak the URL to see other customers' data...
• choward 7y ago
  My favorite is when they truncate it without telling you. It's a better UX though!
  • mikeash 7y ago
    Mine silently truncates to 8 characters and does a case insensitive comparison. Good thing they have all the liability....
  • arshbot 7y ago
    What if they truncate AND lower case it without telling you? Looking at you Wells Fargo
• deleted 7y ago
  [deleted]