this post was submitted on 23 Sep 2023
1246 points (98.1% liked)

Comic Strips

11502 readers
2877 users here now

Comic Strips is a community for those who love comic stories.

The rules are simple:

Web of links

founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] psud 10 points 10 months ago (2 children)

My electric and gas utility truncates passwords, but lets you type hundreds of chars when setting a new password

To log in, you need to intuit how much of your password they're using, if you enter too many chars it fails like in the op image

[–] Neon 3 points 10 months ago (1 children)
[–] psud 9 points 10 months ago (1 children)

Step 1: create a 20 character password, store it in your password manager

Step 2: the account creation process keeps the first 16 characters

Step 3: attempt to log in with the 20 character password, fail.

I found the 16 character maximum in the password rules in their FAQ, so tried the first 16 chars of my password and it worked, so the above must be how it worked

[–] [email protected] 4 points 10 months ago (1 children)

The text boxes shouldn't have a character limit on them for this very reason. If they need to configure a limit they should allow the form to be submitted but return an error telling it's too many characters. Truncating the user's input is really bad for the exact reason you mention.

There's a lot of sites with bad ways of handling credentials. I really hate sites that stop you from pasting in passwords.

[–] psud 2 points 10 months ago (1 children)

My bank used to block pasting, so I used a browser extension version of KeePass to auto type

Luckily they changed that policy when password managers became the main recommended method of handling passwords

So I no longer know my bank password, I saw it once when I accepted what KeePass generated

[–] [email protected] 1 points 10 months ago

KeePass Auto-type is an amazing feature. One that many KeePass users also don't seem to know about!