[SilasX]

>Choose a username that is 6-74 characters long and must contain a lowercase or capital letter, a number, or one of these symbols _.@/-."

Requiring entropy in the username? What? I can understand the password, but what site requires you to put a symbol in your username?

[arxanas]

I haven't visited the website but

> lowercase or capital letter, a number, or one of these symbols _.@/-."

says "or" and not "and", so it doesn't actually seem like there's any issue so long as you include a letter. Then the only real restriction is the minimum of six characters.

[joshuahedlund]

It doesn't say "and" but the front end JS won't let you proceed without a special char. But if you put the special char at the end it fails without explanation b/c a different page says you can't do that.

In other words, the sign up page text, the sign up page JS validation, the back end database, and the trouble logging in page ALL have different requirements just for the username.

[smackfu]

Speak of the devil... We just used this terrible site which is used to manage gift cards, and it requires all usernames include a number: https://www.ucard.chase.com/

[mdkess]

I think they're saying that the username has to match [a-zA-Z0-9_\.@/-]{6,} - note the "or" there.

[SilasX]

Ah, okay. That makes more sense. But I thought the standard way to phrase that restriction was something more like "Username may only contain letters, numbers, and the symbols _.@/- ."