This is a most excellent place for technology news and articles.
We've all been there.
The number of times I've gone through that only to have it fail without explanation when I exceed the length limit - forcing me to guess if that must be the issue - is FAR higher than it should be.
And fuck any system that doesn't provide the criteria up front.
Also fun is when the field to initially set the password is also character limited and you choose a password that’s longer than the field but don’t notice until you’ve set it and get repeated login failures afterward
Yeah that nearly makes me want to smash something when it happens. Anyone that silently truncates passwords should NOT do it, or at least truncate the creation AND login forms. Just say the limit and give a error, or handle extra input the way you're supposed to in the enceyption algorithm and hash it to to the correct length. A length limit of say, the amount of bits the encryption key has, like 32/64/128 chracters for 256/512/1024 bit, is reasonable, any other limit is stupid.
Is there any actual services that check if the password is already in use?
I've heard that some really obscure website even told you who used that exact password, because the CEO of the company owning said website complained for not having it, then the IT company who made the website had to add it. (If you ask: it was some Hungarian-owned website, and not space Karen's 1000IQ idea)
There are definitely services that fuss if you use a password you've used before.
-Try to log in, password incorrect.
-Try to log in, password incorrect.
-Try to log in, password incorrect.
-Weird, ok reset password.
-"Enter new password." Enter the password I've been typing the whole time. "Sorry, you can't use your old password."
-DAMMIT!
I'm pretty convinced this happens because their password validation isn't responding quickly enough and it defaults to "password incorrect."
As a sysadmin, can I just say: BAD PASSWORD: more than 3 consecutive characters of the same class
That password is already in use by user 'gigachad'.
This is why one of my passwords is something like forFUCKSAKE123$#!
