“bUt ItS a SeCuRiTy RiSk.” Yeah maybe when most people were keeping their passwords in a spreadsheet. However now that they are all encrypted in password management programs its a vulnerability. If I can’t generate a 40+ char password for your site then I will not be using your site if I can help it.
you are correct that most people dont keep their passwords in spreadsheets. a lot of people prefer a plaintext file on their desktop, or a note in their phones!
“bUt ItS a SeCuRiTy RiSk.” Yeah maybe when most people were keeping their passwords in a spreadsheet. However now that they are all encrypted in password management programs its a vulnerability. If I can’t generate a 40+ char password for your site then I will not be using your site if I can help it.
you are correct that most people dont keep their passwords in spreadsheets. a lot of people prefer a plaintext file on their desktop, or a note in their phones!
Lifehack: if you use the same password everywhere you don’t have to note anything down.
bonus: make it something easy to remember, like your year of birth
For extra security change an o to a 0, hackers will never be able to break into your account if you do so.
I don’t even think that’s what they were trying to stop, I think they just believe people making bots would only paste.
So put a timeout on too many failed logins instead.