3 ms·
Does password requirements with short max length count as getting it wrong? Because I see that all the time. Also a password box that will accept more characte
by waltbosz 1y ago
Does password requirements with short max length count as getting it wrong? Because I see that all the time.
Also a password box that will accept more characters than the max password length.
- idontwantthis 1y agoHow about one that accepts any length on create but truncates it in the DB so your password manager saves the long one you typed in when it’s actually cut off at 12 chars? Had that one recently.
- waltbosz 1y agoThat begs the question: are they truncating the password string before hashing it ... or truncating it and saving it plaintext? I don't understand enforcing a max password length when the password should be stored as a hash.