4 ms·
That's not true about Paypal though: "Use lower case, upper case, a number, and a special character [like ~!@#$%^&*()_+=?><.,/]." [0] And even if the character
by moviuro 7y ago
That's not true about Paypal though: "Use lower case, upper case, a number, and a special character [like ~!@#$%^&*()_+=?><.,/]." [0]
And even if the character subset is quite small (26 lower case, 26 upper case, 10 digits), it's still good enough if it's completely random and never leaked once. Just max out the password length (start at 32 char) and back track from there.
[0] https://www.paypal.com/us/smarthelp/article/Tips-for-creating-a-secure-password-FAQ3152 https://www.paypal.com/us/smarthelp/article/Tips-for-creatin...
- 0xffff2 7y agoI find this to be a recurring theme when banking security comes up. Every time I've ever been in a position to check, the specific claims made by HN comments about lackluster bank security practices have not been true. I assume they must have been true at one point, but commenters don't check that they are still true before commenting.
- vxNsr 7y agoIt was true in 2016 when I created my account. it was also true about BoA, they allowed a limited char-set.
- vxNsr 7y agoThat doc isn't dated, but it was true as recently as three years ago.