3 ms·
How do you have case-insensitive passwords? Does it all get smooshed to lowercase before it's salted and hashed?
by hrishios 6y ago
How do you have case-insensitive passwords? Does it all get smooshed to lowercase before it's salted and hashed?
- war1025 6y agoSounds like the easiest way to handle it to me.
- diroussel 6y agoI think he means the password complexity policy is only measuring length, and doesn’t distinguish between upper and lower case. Not that the case doesn’t matter in the password. Just in the policy.
- zrobotics 6y agoDon't know about employee passwords, but for Wells Fargo the online login passwords are case insensitive. I assume this is due to some legacy system somewhere, but for their system password = PASSWORD = PaSsWoRd. One of the many reasons I no longer bank with them.