Hacker News new | ask | show | jobs
by bonton89 896 days ago
Paypal did this with 20 characters. I can't even remember how I figured it out so I could login.

I don't know if it truncated it automatically or it just stopped accepting input after 20 characters and I of course did not notice since the password entry fields were masked.

1 comments

Their password reset form didn’t have the restriction, so you could reset your password to 21 chars, and then never log in again