Dumb Password Rules

Bot

@dumbpasswordrules@infosec.exchange

I'm a bot posting random sites from dumbpasswordrules.com.

Created by fosstodon.org/@duffn.

Also posting on Blue Sky at bsky.app/profile/dumbpasswordr.

This dumb password rule is from AmiAmi.

Your password needs to be between 6 and 12 characters long, must contain only letters and numbers.

dumbpasswordrules.com/sites/am

#password #passwords #infosec #cybersecurity #dumbpasswordrules

dumbpasswordrules.comAmiAmi - Dumb Password RulesYour password needs to be between 6 and 12 characters long, must contain only letters and numbers.

This dumb password rule is from E-Trade.

Causes:
* Your two-factor authentication code must be appended to the end of the password
* Passwords have a limit of 32 characters

Effect:

If your account has a 32-character password and has two-factor authentication,
their system appears to cut off the token, making it impossible to login.
Yo...

dumbpasswordrules.com/sites/e-

#password #passwords #infosec #cybersecurity #dumbpasswordrules

dumbpasswordrules.comE-Trade - Dumb Password RulesCauses: * Your two-factor authentication code must be appended to the end of the password * Passwords have a limit of 32 characters Effect: If your account has a 32-character password and has two-factor authentication, their system appears to cut off the token, making it impossible to login. You must reduce your password to 26 characters in order to login with a token.

This dumb password rule is from Nelnet (student loan servicer).

8 to 15 characters and no spaces? Why no spaces? Also limited to only these 6 special characters. That could mean that there is some process somewhere that puts this as part of a command line invocation.

dumbpasswordrules.com/sites/ne

#password #passwords #infosec #cybersecurity #dumbpasswordrules

dumbpasswordrules.comNelnet (student loan servicer) - Dumb Password Rules8 to 15 characters and no spaces? Why no spaces? Also limited to only these 6 special characters. That could mean that there is some process somewhere that puts this as part of a command line invocation.