What is your favourite password rule?

  • bleistift2@sopuli.xyz
    link
    fedilink
    English
    arrow-up
    9
    ·
    1 month ago

    As a website developer, it’s easy to just use the ‘maxlength’ attribute on fields you don’t want to exceed a certain length (for valid reasons or not). But then exactly this happens: A user pastes something in there, doesn’t notice that their input got truncated, and something, somewhere breaks.

    ‘maxlength’ is terrible user experience.

    • Lifter@discuss.tchncs.de
      link
      fedilink
      arrow-up
      3
      ·
      1 month ago

      That wouldn’t have been (as much of) a problem if the initial password form also truncated the input. The mismatch is the problem.

    • Ephera@lemmy.ml
      link
      fedilink
      arrow-up
      3
      ·
      1 month ago

      Yeah, thinking about it now, I could’ve probably tried removing the maxlength attribute to see if the server accepts the longer password.

    • MystikIncarnate@lemmy.ca
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      1
      ·
      1 month ago

      I understand why stored information, such as passwords, usernames, stuff like that, has to have a max character count.

      What I don’t get is why so many people are so daft as to let stuff like this happen, and not even put the maximum password length anywhere people can obviously see it.

      If you tell me what the maximum limit is, I’ll be able to keep my password shorter than that.

      But no… Password minimum length is shown, symbols, numbers and special character requirements are plainly stated. Maximums? Ha.