Facebook did something similar. If I recall correctly, the case could be entirely inverted (caps lock key was on) and you could still log in. I believe they did

Facebook did something similar. If I recall correctly, the case could be entirely inverted (caps lock key was on) and you could still log in. I believe they did this by storing 3 versions of your password hash (initial case, inverted case, and original case), and the permitting sign in if your submitted password hash matched any one of them. Edit: I found the source for this. http://www.zdnet.com/blog/facebook/facebook-passwords-are-not-case-sensitive-update/3612 http://www.zdnet.com/blog/facebook/facebook-passwords-are-no...