Skip to content

Comment on Ask HN: Is there a good reason for disallowing some characters from a password?parent

Comments

> it's very important when you're storing passwords in plain text, so typically it's a sign the website is dangerously insecure ...

This is a misconception. Password length is far more important than allowing a few "tricky" non-alphanumerics. It aids entropy, but it's not some security silver bullet. Also, if the web service you're using is storing undigested passwords then all bets are off.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.