6 ms·

Since I’m using a password manager, I’m generating >24 digit passwords, because I’ll never have to type them. You would be surprised how many websites cut every

by Tea418 6y ago

Since I’m using a password manager, I’m generating >24 digit passwords, because I’ll never have to type them. You would be surprised how many websites cut everything after 24/32 digits during registration without notice, but suddenly allow more digits in the login form, leading to login issues.

sircastor 6y ago
There have been more times than I care to count that I’ve needed to type my 32+ Long character password. Is unusual, but not never.
- danmur 6y ago
  Using a tv remote is the worst
  - nonameiguess 6y ago
    Big props here to Amazon Prime Video for allowing you to open an Amazon app you've already logged into on a device with a camera and scan a QR code on your television to log in, rather than requiring you to type a password using arrow keys to select from a virtual keyboard.
    - maneesh 6y ago
      Hulu also allows you to type a short character sequence from a website instead of using a password.
    - sircastor 6y ago
      I was just using the Roku app on my phone for this. I don’t know if it’s universal for apps on the Roku, but it certainly is nice.
  - blauditore 6y ago
    It's even worse with Apple TV, where you have to swipe between characters on a single row. They completely butchered UX on that one, it's infuriating.
    - jeffgreco 6y ago
      I’ve found voice dictation surprisingly useful in these situations - you can instruct which case to use as well as using military alphabet. https://support.apple.com/guide/tv/use-siri-dictation-atvb21adcfa9/tvos https://support.apple.com/guide/tv/use-siri-dictation-atvb21...
      - slim 6y ago
        I would not do that for a password
    - JohnCurran 6y ago
      If you have an iPhone, you can use the Apple TV remote on the phone which will show a text input you can type on (on any form text input). This has the added bonus of being able to access your keychain for automatic password filling I have enabled the tv remote on control center - I’m not sure if it’s there by default. You should be able to toggle it in settings
    - loriverkutya 6y ago
      That’s why I use apple remote app where even copy paste works.
      - blauditore 6y ago
        ...which is only available on iOS (I don't have an iPhone). This is one of my other pet peeves with Apple products.
- harg 6y ago
  It’s for these situations that I tend to use pass phrases rather than long random strings of different special characters. Much easier to type 4 or 5 words
Cosmin_C 6y ago
This is infuriating. Then you need to go through a password reset to be able to recover the account and some websites don't even bother to tell you how many characters you're allowed to enter in the password field, leading to a whack-a-mole type of situation where you reset password -> check with a lower number of characters -> issues -> reset again and rinse and repeat.
gruez 6y ago
Is there even a point in using passwords that long? It sounds like overkill to me. Assuming your attacker had the computing power of the bitcoin network (ie. attempts per second = hashes per second), then a 16 character alphanumeric password would take more than 800,000 years to crack.
- pferde 6y ago
  If you are using a password manager, then a (good) longer password is basically extra safety for literally zero extra price, so why not? What does it matter if you are copypasting , or letting the password manager autofill, twelve characters or fifty?
  - slazaro 6y ago
    The GP comment gave a reason: some websites might misbehave with longer passwords, so it's not actually free.
    - pferde 6y ago
      But that's a self-defeating attitude. If you are going to defensively assume that websites are broken in this way, the only logical conclusion is to limit your generated passwords to something ridiculously conservative, like six characters. In my opinion, it is more reasonable to assume that most websites will behave correctly with even longer passwords, and solve the odd misbehaving ones on a case by case basis.
      - gruez 6y ago
        But if 16 characters is already secure for the foreseeable future, why bother risking it for negligible gains in security?
        pferde 6y ago
        That's something each of us has to determine for themselves. I haven't yet, in my many years of "being on the web" encountered a single website with the truncated password problem described above, so for me, it's a weird statistical anomaly to be ignored. If you have been burned repeatedly by some such websites, you will have a different outlook, and will generate your own passwords accordingly.
throw0101a 6y ago
> You would be surprised how many websites cut everything after 24/32 digits during registration without notice, but suddenly allow more digits in the login form, leading to login issues. The input type="password" element allows for passing information to browsers / password managers what the limitations: * https://developer.mozilla.org/en-US/docs/Web/HTML/Element/input/password https://developer.mozilla.org/en-US/docs/Web/HTML/Element/in... maxlength, minlength, pattern ("A regular expression the value must match in order to be valid").
bsimpson 6y ago
Schwab, the 120 billion dollar financial institution, famously had this problem for years. Until relatively recently, they silently truncated the password that literally protected your bank account to 8 characters.

by Tea418 6y ago

sircastor 6y ago

There have been more times than I care to count that I’ve needed to type my 32+ Long character password. Is unusual, but not never.

danmur 6y ago
Using a tv remote is the worst
- nonameiguess 6y ago
  Big props here to Amazon Prime Video for allowing you to open an Amazon app you've already logged into on a device with a camera and scan a QR code on your television to log in, rather than requiring you to type a password using arrow keys to select from a virtual keyboard.
  - maneesh 6y ago
    Hulu also allows you to type a short character sequence from a website instead of using a password.
  - sircastor 6y ago
    I was just using the Roku app on my phone for this. I don’t know if it’s universal for apps on the Roku, but it certainly is nice.
- blauditore 6y ago
  It's even worse with Apple TV, where you have to swipe between characters on a single row. They completely butchered UX on that one, it's infuriating.
  - jeffgreco 6y ago
    I’ve found voice dictation surprisingly useful in these situations - you can instruct which case to use as well as using military alphabet. https://support.apple.com/guide/tv/use-siri-dictation-atvb21adcfa9/tvos https://support.apple.com/guide/tv/use-siri-dictation-atvb21...
    - slim 6y ago
      I would not do that for a password
  - JohnCurran 6y ago
    If you have an iPhone, you can use the Apple TV remote on the phone which will show a text input you can type on (on any form text input). This has the added bonus of being able to access your keychain for automatic password filling I have enabled the tv remote on control center - I’m not sure if it’s there by default. You should be able to toggle it in settings
  - loriverkutya 6y ago
    That’s why I use apple remote app where even copy paste works.
    - blauditore 6y ago
      ...which is only available on iOS (I don't have an iPhone). This is one of my other pet peeves with Apple products.
harg 6y ago
It’s for these situations that I tend to use pass phrases rather than long random strings of different special characters. Much easier to type 4 or 5 words

Cosmin_C 6y ago

This is infuriating. Then you need to go through a password reset to be able to recover the account and some websites don't even bother to tell you how many characters you're allowed to enter in the password field, leading to a whack-a-mole type of situation where you reset password -> check with a lower number of characters -> issues -> reset again and rinse and repeat.

gruez 6y ago

Is there even a point in using passwords that long? It sounds like overkill to me. Assuming your attacker had the computing power of the bitcoin network (ie. attempts per second = hashes per second), then a 16 character alphanumeric password would take more than 800,000 years to crack.

pferde 6y ago
If you are using a password manager, then a (good) longer password is basically extra safety for literally zero extra price, so why not? What does it matter if you are copypasting , or letting the password manager autofill, twelve characters or fifty?
- slazaro 6y ago
  The GP comment gave a reason: some websites might misbehave with longer passwords, so it's not actually free.
  - pferde 6y ago
    But that's a self-defeating attitude. If you are going to defensively assume that websites are broken in this way, the only logical conclusion is to limit your generated passwords to something ridiculously conservative, like six characters. In my opinion, it is more reasonable to assume that most websites will behave correctly with even longer passwords, and solve the odd misbehaving ones on a case by case basis.
    - gruez 6y ago
      But if 16 characters is already secure for the foreseeable future, why bother risking it for negligible gains in security?
      - pferde 6y ago
        That's something each of us has to determine for themselves. I haven't yet, in my many years of "being on the web" encountered a single website with the truncated password problem described above, so for me, it's a weird statistical anomaly to be ignored. If you have been burned repeatedly by some such websites, you will have a different outlook, and will generate your own passwords accordingly.

throw0101a 6y ago

> You would be surprised how many websites cut everything after 24/32 digits during registration without notice, but suddenly allow more digits in the login form, leading to login issues. The input type="password" element allows for passing information to browsers / password managers what the limitations: * https://developer.mozilla.org/en-US/docs/Web/HTML/Element/input/password https://developer.mozilla.org/en-US/docs/Web/HTML/Element/in... maxlength, minlength, pattern ("A regular expression the value must match in order to be valid").

bsimpson 6y ago

Schwab, the 120 billion dollar financial institution, famously had this problem for years. Until relatively recently, they silently truncated the password that literally protected your bank account to 8 characters.