3 ms·
When you did your simulation did you use lowercase and uppercase letters? I ask because chase.com doesn't differentiate between the two. Seriously. If you have
by bonestamp2 7y ago
When you did your simulation did you use lowercase and uppercase letters? I ask because chase.com doesn't differentiate between the two. Seriously. If you have a chase account, try changing the case of some of your letters and you'll still login successfully.
- panarky 7y agoUsing uppercase and lowercase letters and the symbols Chase supports, 0.25% of random 12-character passwords would be rejected by the repeating and consecutive rules. Re-running the simulation to assume case-insensitivity results in 0.44% of random 12-character passwords failing these rules (assuming Chase treats aBc as an invalid sequence). Note that Facebook also accepts variations on a password, for example if you have caps lock on, or if the mobile device automatically capitalizes the first character, or if an additional character is added at the end of the password. More discussion on Facebook's policy here -> https://news.ycombinator.com/item?id=13426544 https://news.ycombinator.com/item?id=13426544
- twistedpair 7y agoThis is often so you can enter your password in a touch tone phone, since there are no caps there.