3 ms·
How about one that accepts any length on create but truncates it in the DB so your password manager saves the long one you typed in when it’s actually cut off a
by idontwantthis 1y ago
How about one that accepts any length on create but truncates it in the DB so your password manager saves the long one you typed in when it’s actually cut off at 12 chars? Had that one recently.
- waltbosz 1y agoThat begs the question: are they truncating the password string before hashing it ... or truncating it and saving it plaintext? I don't understand enforcing a max password length when the password should be stored as a hash.