Some time ago I tried registering an account on a site where the password policy was that you couldn't use special characters and that it would discard any characters you entered after the first 15 ones.
But you know what the worst part was?
They never bothered informing you about these limitations. The site just returned a generic error.
Not supporting special characters I can kinda understand but silently discarding characters from the password the user has picked is just evil. It took me LOTS of registration attempts and password resets before I figured out what the hell was going on.
But you know what the worst part was?
They never bothered informing you about these limitations. The site just returned a generic error.
Not supporting special characters I can kinda understand but silently discarding characters from the password the user has picked is just evil. It took me LOTS of registration attempts and password resets before I figured out what the hell was going on.