Dumb Password Rules

Troy Hunt is collecting examples of dumb password rules.

There are some pretty bad disasters out there.

My worst experiences are with sites that have artificial complexity requirements that cause my personal password-generation systems to fail. Some of the systems on the list are even worse: when they fail they don’t tell you why, so you just have to guess until you get it right.

artificial bad collecting complexity don fail hunt list password passwords personal requirements rules systems troy hunt