this post was submitted on 18 Aug 2024
858 points (98.9% liked)

Cybersecurity - Memes

3247 readers
1 users here now

Only the hottest memes in Cybersecurity

founded 2 years ago
MODERATORS
Sam1232188@lemmy.world
neurohost@lemmy.world
Sam1232188@lemmy.fmhy.ml
Alphadef@programming.dev
CannaVet@lemmy.world
858
Password length requirement (infosec.pub)
submitted 11 months ago* (last edited 11 months ago) by cron@feddit.org to c/cybersecuritymemes@lemmy.world
169 comments fedilink hide all child comments
 

Last week, I tried to register for a service and was really surprised by a password limit of 16 characters. Why on earth yould you impose such strict limits? Never heard of correct horse battery staple?

you are viewing a single comment's thread
view the rest of the comments
[–] frezik@midwest.social 1 points 11 months ago

Bcrypt and scrypt have a limit of 72 chars, so it's probably that. Implementations can work around it by putting the password through a pre-hash, but most don't bother. There are tons of reasonably secure password storage systems with that limit.