5 ms·

That's a very common pattern. Special characters are usually allowed only from a predefined list. I don't see how this is specifically bad or deserves a blog po

That's a very common pattern. Special characters are usually allowed only from a predefined list. I don't see how this is specifically bad or deserves a blog post.

stingraycharles 3y ago
Yup, anyone who's using a password manager and/or generates passwords runs into these issues from time to time. Super strong passwords being rejected, and have to make them simpler. I'd say I run into this multiple times a year.
raverbashing 3y ago
Yeah And let me tell you about the 'super strong password' your generators create: they suck They suck if you have to deal with any kind of escaping (like in a shell script, for example) They suck if you're unsure of the current keyboard layout you're currently using Easier to take out some character classes instead of having to solve support tickets
- mwint 3y ago
  Agree. Apple’s default password generator has always seemed to strike a sane balance - plenty of entropy, technically contains special characters (-) but nothing that needs escaped, and very typeable or readable.
- bpye 3y ago
  Back when I was in school, in the U.K., my password contained a ‘£’. This was fine for logging into Windows or Outlook etc, however the printers required you enter your password and only had a US keyboard layout - so that was fun.
bogantech 3y ago
> Special characters are usually allowed only from a predefined list. I don't see how this is specifically bad or deserves a blog post. Why limit it in such a way? if the backend is so fragile it can't handle a + sign then it is bad
- deleted 3y ago
  [deleted]
PMunch 3y ago
I'd be inclined to agree, but this is rejecting ASCII characters. I can see not supporting emoji in your passwords, but angle brackets have their own key on my keyboard, they should be supported. As for the blog post it was just a way for me to get some frustration off my chest. It's also posted in the "Scraps" section of my site, which I just use for short one-off things like this. If I then decide to write an article about it later (like a longer thing about password managers and dealing with passwords online) then I could link to these scraps.

That's a very common pattern. Special characters are usually allowed only from a predefined list. I don't see how this is specifically bad or deserves a blog post.

stingraycharles 3y ago

Yup, anyone who's using a password manager and/or generates passwords runs into these issues from time to time. Super strong passwords being rejected, and have to make them simpler. I'd say I run into this multiple times a year.

raverbashing 3y ago

Yeah And let me tell you about the 'super strong password' your generators create: they suck They suck if you have to deal with any kind of escaping (like in a shell script, for example) They suck if you're unsure of the current keyboard layout you're currently using Easier to take out some character classes instead of having to solve support tickets

mwint 3y ago
Agree. Apple’s default password generator has always seemed to strike a sane balance - plenty of entropy, technically contains special characters (-) but nothing that needs escaped, and very typeable or readable.
bpye 3y ago
Back when I was in school, in the U.K., my password contained a ‘£’. This was fine for logging into Windows or Outlook etc, however the printers required you enter your password and only had a US keyboard layout - so that was fun.

bogantech 3y ago

> Special characters are usually allowed only from a predefined list. I don't see how this is specifically bad or deserves a blog post. Why limit it in such a way? if the backend is so fragile it can't handle a + sign then it is bad

deleted 3y ago
[deleted]

PMunch 3y ago

I'd be inclined to agree, but this is rejecting ASCII characters. I can see not supporting emoji in your passwords, but angle brackets have their own key on my keyboard, they should be supported. As for the blog post it was just a way for me to get some frustration off my chest. It's also posted in the "Scraps" section of my site, which I just use for short one-off things like this. If I then decide to write an article about it later (like a longer thing about password managers and dealing with passwords online) then I could link to these scraps.