• FooBarrington@lemmy.world
      link
      fedilink
      arrow-up
      4
      ·
      3 days ago

      I’ve literally never had an issue with password generation. Usually I generate 32 character passwords with all types of characters passwords on average expect. If a page has different rules, I just check the corresponding boxes in my password manager, and I get one that works for that site.

      • BehindTheBarrier@programming.dev
        link
        fedilink
        arrow-up
        2
        ·
        1 day ago

        Peguots(car brand) app requires between 8 and 16 characters, no repeating characters, and that it contain 4 of the following: uppercase letter, lowercase letter, number, a special character in this list @$!%*?&_- ;

        You’d think that’d be fine, but no. It took me several tries to generate a password that complied, even after limiting to only valid characters and a length of 16. I got the feeling there’s an extra rule not shown,maybe lost in translation. In Norwegian it literally says “no repeat or successive characters” making it sound like I can only use a letter once, but thankfully not.

        Pure torture. And the app is so shit I get logged out often, and auto fill with my password manager does not work in that app. Pressing login also fails half the time.

        • FooBarrington@lemmy.world
          link
          fedilink
          arrow-up
          2
          ·
          2 days ago

          In that extremely rare case I just delete the offending characters from my long generated password or add a couple randomly.

      • bestboyfriendintheworld@sh.itjust.works
        link
        fedilink
        arrow-up
        3
        arrow-down
        1
        ·
        2 days ago

        Just yesterday my library required a new password. The password requirements were:

        • 8 to 18 characters
        • uppercase
        • lowercase
        • number
        • one of the 8 special characters listed

        When borrowing from the library physically, I need to enter this password on a touchscreen keypad. So no copy and paste from a password manager.

        They used to have birthdates as the assigned password for everyone. If you request a password reset, it resets to the birthdate. You have to change it on first login.

        A little better than before, but doesn’t feel secure.

        On the other hand, abuse is kinda difficult.

        For physically loaning books, you need the library card with its RFID chip. For anything digital, there’s no incentive or possibility for abuse really.