Timeline for Why do some websites and programs restrict password characteristics?
Current License: CC BY-SA 2.5
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 13, 2016 at 9:05 | comment | added | Wrzlprmft | In plain words, if a password is huge or full of weird characters, then this increases the likelihood that the user will write the password down on some piece of paper (traditionally glued under the keyboard) and/or reuse the same password into several systems. – (Almost) all my password are long, site-specific ASCII-fied hashes (which I did not write down but generate when I need them). Imposing restrictions keeps me from using those safe passwords. | |
| Dec 19, 2014 at 18:31 | comment | added | Christopher Perrin | @Shadur I don't necessarily agree. Though writing down a password is less secure than memorizing it, it is not always feasible to acquire such written passwords. In high security contexts this might be true but for public websites with a huge Userbase it is less likely that such a password will be searched for and stolen. Her a weak password is worse than a written password. | |
| Apr 16, 2014 at 6:45 | comment | added | Shadur-don't-feed-the-AI | There are good reasons to encourage or even enforce strong passwords, but I think nine times out of ten what happens is people invent a strong password, and then write it down on a post-it. A weaker password that they then memorized would arguable be more secure. | |
| Jan 10, 2011 at 14:28 | history | answered | Thomas Pornin | CC BY-SA 2.5 |