Hacker News Reader

You know what the worst is? When they limit you to, say, 20 or 32 characters, but accept a longer password and silently truncate it!

I've run across that at least once and it was a total pain to troubleshoot and figure out.

The number of sites that restrict passwords to 20 characters drives me nuts!

There needs to be a limit, yes, but surely something like 100 characters, or even 50, would be more sensible.

And it's the same websites that tend to use the bad practice of forcing the use of 2-4 "types" of characters...

like some banks used to

Banks all have systems that will stop you from attempting to bruteforce them.