Linked Questions
42 questions linked to/from What technical reasons are there to have low maximum password lengths?
23
votes
2
answers
4k
views
Why do password requirements exist while limiting the upper character count? [duplicate]
I do not quite understand why it is common practice to require a difficult to remember password with alphanumeric and special character requirements, while also having an upper limit of 32 characters. ...
- 357
4
votes
3
answers
6k
views
Why is there a Cap on Password length? [duplicate]
Why when we sign up on sites like Facebook and Gmail do our passwords have to be 8-12 characters in length, or some other cap? 8-12 spaces are finite, but you can make your passwords more "secure" by ...
6
votes
3
answers
1k
views
Websites Forcing Weak Password Standards (Updated) [duplicate]
Please Note: I am not going to name the websites which have these horrible standards for their clients and users.
I have had to change my passwords for my routine update just recently in the last few ...
- 906
9
votes
1
answer
596
views
Why do some sites enforce low-security passwords? [duplicate]
I get that what comprises a good password is a bit of a moving target and not everyone agrees - just run a password through a number of checkers to see how it is rated differently depending on the ...
- 91
4
votes
4
answers
542
views
Are limited length passwords a security risk? [duplicate]
I found a webpage where users can be registered. However, it seems that the length of the password must be between 6 to 12 characters.
Is that a security risk?
- 49
4
votes
1
answer
2k
views
Why do websites limit password length? [duplicate]
I just made a new account with some eGov service (Belgian government).
I use LastPass (which generates long, random strings for each site),
But the system told me that the maximum allowed length was ...
- 333
0
votes
2
answers
450
views
Passwords: Symbols and length > 20 disallowed [duplicate]
I'm going through a bunch of accounts at the moment changing my passwords, some of them are looking a little weak and i've reused them, but i keep coming across websites that don't allow you to use ...
- 2,617
0
votes
1
answer
859
views
Recommended length of password [duplicate]
Why are we recommended to have at least 8 characters, and not 6 or 7 etc.? and the different set of character?. I only know that the longer the password is, the harder it is for brute force attack to ...
- 67
-1
votes
1
answer
229
views
Reasons to limit password length [duplicate]
We are currently using a third party software for SSO Login in a hybrid landscape with SAP, ADFS, etc.
The users have to change their password in the client software, which is then sent to a central ...
- 1,072
-1
votes
1
answer
214
views
What are the security implications of the password policy for this bank? [duplicate]
I am aware of a bank (redacted for obvious reasons) that has the following password policy.
Only English alphanumeric characters
Min of 8, max of 14 characters
No special characters (ex. !@#$%^&* ...
0
votes
1
answer
224
views
Are short password length requirements a security risk? [duplicate]
I visited a website that requires me to create a password. One of the password rules was "7 to 15 letters". Is this a security risk, since many people would now enter a weak password instead?...
- 2,727
1
vote
0
answers
76
views
Is there a technical reason for a maximum password length rule (15 to 100 characters)? [duplicate]
I've seen on many sites in the registration page that the password should have also a maximum length (between 15 and 100 characters). Except for DDOS attacks, is there a reason for this rule, giving ...
- 265
0
votes
0
answers
58
views
Does a small max password length indicate there might be a security issue? [duplicate]
Some websites state specific requirements for a password when you create an account. Some are understandable, but in particular the maximum password length doesn't make sense to me.
Some websites ...
- 1
0
votes
0
answers
50
views
Why are there password length limitations when the password is stored correctly? [duplicate]
I often (almost always) see that the password i choose in a service is limited (to 16, 30, whatever characters).
Are there any reasons for such a limit, provided that it is stored correctly? In such ...
- 9,096
944
votes
11
answers
332k
views
How to securely hash passwords?
If I hash passwords before storing them in my database, is that sufficient to prevent them being recovered by anyone?
I should point out that this relates only to retrieval directly from the database,...
AviD♦
- 73.6k