Hacker News new | ask | show | jobs
by Incipient 291 days ago
If the shoe fits.

It's a pet peeve of mine when applications have stupid password requirements. It's an incredibly basic thing to get right. If you can't get that right, good luck with the rest of the application.

The only exception to this is if someone is trying to use outrageously long vaultwarden passwords (eg 100 characters) as that can technically break some ciphers, and doesn't provide meaningful security.

2 comments

This is a completely solved problem , see https://cheatsheetseries.owasp.org/cheatsheets/Password_Stor...
You can just accept the 100 character password and cut it off at something reasonable like 32 characters.