> Why can't my password be a 5KB long?
replyYou should switch to Windows, Microsoft got you covered[1].
[1]: https://www.betaarchive.com/wiki/index.php/Microsoft_KB_Arch...
And content limits. Why can't my password contain the % character? No special characters? What makes a character "special"? Why can't it contain emoji? So many password systems go to great lengths to remove potential entropy and randomness from passwords with their rules. The usual excuse is "blah blah blah legacy systems" which is not a good reason.
replyPersonally, I wouldn't use anything beyond ASCII in a password. I don't want encoding bugs to lock me out of my encrypted partition or bank account, thank you very much.
replyProbably because there is some mildly decent reason (or very good, I don't know) to avoid them and it really doesn't matter enough to worry about getting around it.
replyWhy would you want emojis in your password? It's a piece of text not meant to be seen, emojis are meant to be seen. Just randomly generate some characters and get on with your life. I don't understand why you care about this at all, it's such a pointless thing to complain about.
I ran into a website for work that would let you create a long password, but silently truncate it to 12 characters before saving. Mind boggling.
replyI unfortunately had the infuriating experience dealing with a (government, of course) site that did this. To add to the experience, not only did it silently truncate at registration, but it did NOT truncate on the login fields. And of course, it has a lockout after several failed attempts. UX gore at it's finest.
replyThis is the best. Especially when the password is being autotyped by the pw manager and so you never see the truncation and now have a bad pw saved in your manager. Alongside a restrictive password policy with no ui explaining what the policy is.
replyThis happens on some HP printers too, the web interface lets you happily enter lengthy passwords, but doesn't bother telling you it truncated the entry at 16 or 12 characters.
replyBlizzard/battle.net used to this (still does?), lol
reply> Why can't my password be a 5KB long?
replyProbably because that's just unnecessary. A few dozen characters is plenty, anything beyond that is just excessive.
I wouldn’t trust enterprise internet security boxes to not trip on such long text fields.
reply