There's a nice article about this on the AgileBits blog [1]. In summary they say it's a net gain for security because trying variations on a supplied password

There's a nice article about this on the AgileBits blog [1]. In summary they say it's a net gain for security because trying variations on a supplied password doesn't help an attack much and reducing the number of password resets is a positive from a security perspective. [1] http://blog.agilebits.com/2011/09/13/facebook-and-caps-lock-unintuitive-security/ http://blog.agilebits.com/2011/09/13/facebook-and-caps-lock-...