Hacker News Reader

Account breaches are so god damn annoying. That coupled with the stupid rules for coming up with passwords (only 6-8 characters, a-z,A-Z,0-9 allowed!) makes it really frustrating to keep track of and manage passwords for sites like this.

Hurry up and solve the user identification problem, HN.

View on HN

It's astounding to me that some sites still limit passwords to such a small number of characters. "Security? We're not even trying."

Even stupider are sites that require exactly N characters. Also, they usually pick small N for that as well.

I know a local bank that limits password lengths to exactly 7, and the contents of the passwords to ONLY DIGITS. I can't imagine how many users are going to just use their phone number.

^ exactly the reasons I went ahead and started using KeePassX.

It's a bit terrifying at first to not know any of your passwords, but you get used to it.

It doesn't bother me, given the ubiquity of email resets.

I do still have a bunch of really old ones (pre-password-manager) memorized, though.

Reply on news.ycombinator.com