Hacker News new | ask | show | jobs
by account42 1216 days ago
> special characters required

This one is super annoying. A long password without special characters is not any less secure than a short password with one special character added because it was required.

Better than arbitrary requirements like this would be to estimate the entropy and then just prevent low-entropy passwords (or only tell the user - not everyone needs the same level of security for everything).