4 ms·

Your site doesn't think "$&m22KPBeB$!7&^l" is a strong enough password. Uhm… okay?

• john-radio 3y ago
  Obviously it isn't, when you've just posted it here!
• jjcm 3y ago
  Interesting, I was able to sign up with it. Can I ask if you're using a password manager / what browser you're using? Also for context, instead of testing password length/number of characters, I look for overall entropy in the formula of [alphabet length for char set used]^(number of letters in password). The one you described is well above the limit.
  • alexb_ 3y ago
    > instead of testing password length/number of characters, I look for overall entropy in the formula of [alphabet length for char set used]^(number of letters in password). You should do none of this. It shouldn't be the websites concern if my account gets hacked - basic password requirements are fine, but anything that goes past a character count is just making the UX worse. The requirements increase friction, which you've already put at a high level due to requiring payment.
  • knorker 3y ago
    LastPass. I think maybe you're not detecting when LastPass fills it in, only when typed?