Password Requirements Shaming

What do you mean your password field has a max length?! I'm sorry, you want me to NOT use any special characters? (apparently i mention how low the bar is pretty frequently.)

Devon Home Choice • Your new password must contain 9 numbers, and include at least 4 different numbers but cannot include the same number more than three times.
Maybe they’re afraid of summoning the manifestation of a number by repeating it thrice?
“...

Devon Home Choice

  • Your new password must contain 9 numbers, and include at least 4 different numbers but cannot include the same number more than three times.

Maybe they’re afraid of summoning the manifestation of a number by repeating it thrice?

Your new password must contain 9 numbers, and include at least 4 different numbers but cannot include the same number more than three times.

Delta Airlines Dubious Decisions by Delta
The small arbitrary max length seems to be a common mistake. Fine.
But what’s wrong with “@” and “” is welcome?
Finally, and perhaps most baffling, is the fact that Delta enforces a maximum number of special...

Delta Airlines

Dubious Decisions by Delta

The small arbitrary max length seems to be a common mistake. Fine.

But what’s wrong with “@” and “” is welcome?

Finally, and perhaps most baffling, is the fact that Delta enforces a maximum number of special characters. That’s right, not a minimum. Not “you have to use at least three special characters”. They don’t care if you use any at all. But please, they beg, four is just too many!

Must Contain

  • 8-20 Characters
  • 1 number
  • 1 uppercase and 1 lowercase letter

Cannot Contain

  • The @ or < symbols
  • Your SkyMiles number, email or username
  • More than 3 special characters

editor’s note: also they don’t use the oxford comma, was this password creation screen created specifically to annoy me?

Paychex Flex Okay let me just get this out of the way right away: I don’t want a company that’s handling my money and what little investment that I—a millenial whose earning potential was permanently reduced by the recession that started in 2008—have...

Paychex Flex

Okay let me just get this out of the way right away: I don’t want a company that’s handling my money and what little investment that I—a millenial whose earning potential was permanently reduced by the recession that started in 2008—have to spell their name with a cutesy “x” instead of “cks”. Show some dignity.

Okay now that THAT is settled, also, let’s have a word about this password situation. You’re gonna take my pittance of a retirement savings and secure it behind a password that’s hard to come up with, hard to remember, and for some strange reason only allows four special characters? What? Why?!

  • 8-32 characters
  • no spaces
  • at least 1 uppercase and 1 lowercase letter
  • at least 1 number
  • cannot contain username
  • acceptable symbols are @ . (Period) - and _
XXImo At xximo.be (editor’s note: a Dutch fleet card program—holds lots of PII), your password has to be exactly 12 characters, no more, no less and these characters have to contain exactly:
• 4 lowercase
• 4 uppercase
• 4 numbers
Great way to...

XXImo

At xximo.be (editor’s note: a Dutch fleet card program—holds lots of PII), your password has to be exactly 12 characters, no more, no less and these characters have to contain exactly:

  • 4 lowercase
  • 4 uppercase
  • 4 numbers

Great way to drastically cut the possible combinations but also to make sure that nobody will remember that crazy password. Or make a really stupid one.

Now, is the password stored in clear in a fixed-length field ?

Marriott Rewards low max-length and incredibly limited selection of “special characters… I forsee a lot of single dictionary words with 1 at the end. I didn’t try Password! but I bet it would have been accepted.
“ • 8-20 characters
• Lower case...

Marriott Rewards

low max-length and incredibly limited selection of “special characters… I forsee a lot of single dictionary words with 1 at the end. I didn’t try Password! but I bet it would have been accepted.

  • 8-20 characters
  • Lower case letter
  • Upper case letter
  • Number or character $ ! # & @ ? % = _
Nintendo Nintendo accounts have a maximum password length of 20 characters, no other password information, and also don’t accept certain special characters. I’m not sure which, it just took me an absurd number of tries before it would accept a...

Nintendo

Nintendo accounts have a maximum password length of 20 characters, no other password information, and also don’t accept certain special characters. I’m not sure which, it just took me an absurd number of tries before it would accept a password generated by 1Password.

Swiss Life Nothing to indicate the password rules. Max length (discovered by typing until it truncate) is only 8 characters. Oh, and also, only numbers. Strangely enought, the recovery password is 9 character…
All the while, it just silently fail,...

Swiss Life

Nothing to indicate the password rules. Max length (discovered by typing until it truncate) is only 8 characters. Oh, and also, only numbers. Strangely enought, the recovery password is 9 character…

All the while, it just silently fail, truncate unwanted character…

https://myswisslife.fr/#/login

DriveNow Translation: Your password does not follow the rules. At least 8 and less than 15 letters, including at least one alphabeth (a-z) and at least two numbers (0-9) or symbols.
Thanks drive-now.com

DriveNow

Translation: Your password does not follow the rules. At least 8 and less than 15 letters, including at least one alphabeth (a-z) and at least two numbers (0-9) or symbols.

Thanks drive-now.com

Amtrak Guest Rewards Amtrak password requirements weren’t displayed until after it rejected my 20 character password - for failing to include a special character.

Amtrak Guest Rewards

Amtrak password requirements weren’t displayed until after it rejected my 20 character password - for failing to include a special character.