This dumb password rule is from Citi. * Password is case-insensitive * Can't use ANY special characters (although, adding special characters increases the "password strength" meter?!) * Allows for a minimum password length of 6 characters * No runs of more than two identical characters (eg. "aaa" i

This dumb password rule is from Rediff. A maximum password length of 12. The hidden requirements are: - at least 1 uppercase letter - at least 1 lowercase letter - at least 1 numeric character - at least 1 special symbol (which can not be ^, %) https://dumbpasswordrules.com/sites/rediff/ #passwor

This dumb password rule is from A1.net. - At least 8 and at most 16 characters - At least 1 digit - At least 1 uppercase letter The password must not contain your first name, surname or username. The allowed special characters are: ! @ # % ^ & * _. https://dumbpa

This dumb password rule is from TreasuryDirect. Will allow most passwords longer than 8 characters. Doesn't tell you there is a maximum length of 16 characters. Then forces you to type it with an on-screen keyboard with no capital letters. https://dumbpasswordrules.com/sites/treasurydirect/ #pass

This dumb password rule is from Shell Fuel Rewards. - No less than 8 and no more than 16 characters - Allows only specific special characters: ! @ # $ % - Doesn't bother to tell you what characters are allowed or not. Hope you like reading JS. https://dumbpasswordrules.com/sites/shell-fuel-reward

This dumb password rule is from Onleihe. Password is your birthday in format ddmmyyyy. Users are not allowed to change their passwords https://dumbpasswordrules.com/sites/onleihe/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Advanzia. - Requires at least 6 to a maximum of 12 characters [sic!] - Allows only digits and letters without umlauts - Allows only specific special characters: ? ! $ \u20AC% & * _ = - +. ,:; / () {} [] ~ @ # - Allows no spaces" https://dumbpasswordrules.com/sites/

This dumb password rule is from Sampath Bank. So many rules! https://dumbpasswordrules.com/sites/sampath-bank/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Telcel. - The username is the cell phone number (easy to get) - The company creates a password between 8 and 12 characters for you - Password must contain at least 1 capital letter and no special characters https://dumbpasswordrules.com/sites/telcel/ #password #pas

This dumb password rule is from LCL. You have to enter your 6-digit password using this Frenchy keypad. https://dumbpasswordrules.com/sites/lcl/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Nintendo. Password between 8-20 characters, at least two "categories" of characters, and cannot use the same character more than twice in a row. At least it supports MFA. https://dumbpasswordrules.com/sites/nintendo/ #password #passwords #infosec #cybersecurity #du

This dumb password rule is from WellStar MyChart. Your password must be between 8 and 20 characters. https://dumbpasswordrules.com/sites/wellstar-mychart/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Microsoft (e company store). Max of 16 character oh and please don't use any characters we don'y know how to escape properly also if it starts with ? you may break our wonderful website. What out with your password generator duplicated characters is far too insecure

This dumb password rule is from Crédit Mutuel de Bretagne. Password must be 10-16 characters with at least one letter, one number and no special character. https://dumbpasswordrules.com/sites/credit-mutuel-de-bretagne/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from E-Redes. Portuguese power distribution company, which requires short passwords (10 to 15 characters), no repetition of the same character, not using the username, the word "PASS" or the word "SAP" in the password, and limiting which special characters can be used. h

This dumb password rule is from Dutch Tax Authorities (Belastingdienst). At least 8 and at most 25 characters, of which at least 3 of the characters were not used in the previous password. No more than 3 of the same characters. At least 1 upper case and 4 lower case characters. No more than 3 speci

This dumb password rule is from Sephora. Password must be between 6 and 12 characters. No other rules specified. https://dumbpasswordrules.com/sites/sephora/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Waze. After you request a password reset and you receive an email with instructions and link to reset your password, you are presented with this password reset form. Your password length is limited between 8 and 16 characters. Additionally the form breaks with an err

This dumb password rule is from Taiwan Pingtung University. Password must: - Be between 8 ~ 15 characters long. - Exceeding 15 will result in an account lockout instead of erroring on submit. Otherwise, the max character length should be 20. - Contains at least 1 number character - Contains at le

This dumb password rule is from SecureAccess Washington. Central authentication for all Washington State services (DoL, ESD, etc). Password must have *exactly* 10 characters, but form happily lets you enter more and only throws errors after submit, providing no useful feedback. https://dumbpasswo

This dumb password rule is from Coventry Building Society. Password has to be between 6 and 10 characters, can't contain any punctuation and you have to give characters from it on the phone to confirm identity. https://dumbpasswordrules.com/sites/coventry-building-society/ #password #passwords #i

This dumb password rule is from Slovenska sporitelna. Slovenska sporitelna is the biggest bank in Slovakia. Despite pretty new version of the internet banking (rolled out in 2018), their password policy restricts password to be 16 characters long at most and prohibits any special characters. https

This dumb password rule is from Coil. Does not allow simple characters and sequences such as '4587' or 'efgh' in password & necessarily requires numeric values. https://dumbpasswordrules.com/sites/coil/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from KPMG Talent Community. While stating otherwise, the site actually *accepts a backslash* in the password and displays a forward slash as the example of the disallowed backslash Password: - Must be at least 8 characters long - Must contain at least 1 number - Must con

This dumb password rule is from GoDaddy SFTP. Max 14 characters for the most important password in your shared hosting environment. https://dumbpasswordrules.com/sites/godaddy-sftp/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Nectar API. The Nectar website allows strong passwords. However, when trying to link my Sainsbury's account, I found the API has different ideas... - Password field length capped to 16 characters https://dumbpasswordrules.com/sites/nectar-api/ #password #passwords

This dumb password rule is from MySwissLife. User ID *has to* be 8 characters exactly, password *has to be* 8 characters and numbers only. https://dumbpasswordrules.com/sites/myswisslife/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from AmiAmi. Your password needs to be between 6 and 12 characters long, must contain only letters and numbers. https://dumbpasswordrules.com/sites/amiami/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from United Parcel Service of America. Your password must: - Be between 7 and 26 characters long - Contain at least 1 lowercase character - Contain at least 1 uppercase character - Contain at least 1 number character - Contain one special character (!@#$%*) - NOT contain

This dumb password rule is from Sephora. Password must be between 6 and 12 characters. No other rules specified. https://dumbpasswordrules.com/sites/sephora/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from KPMG Talent Community. While stating otherwise, the site actually *accepts a backslash* in the password and displays a forward slash as the example of the disallowed backslash Password: - Must be at least 8 characters long - Must contain at least 1 number - Must con

This dumb password rule is from Tangerine. Your PIN can only contain numbers and must be between 4 and 6 numbers. https://dumbpasswordrules.com/sites/tangerine/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from SunTrust. At least there are a variety of special characters to choose from. https://dumbpasswordrules.com/sites/suntrust/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Benergy4. 12 to 25 characters, only these special chars allowed: @+/'!#$^?:,.(){}[]~-. Also, security questions. https://dumbpasswordrules.com/sites/benergy4/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from IRS. Password rules: - Between 8 and 32 characters long - Must contain at least one numeric and one special character (!@#$%&*) - At least one uppercase and at least one lowercase letter https://dumbpasswordrules.com/sites/irs/ #password #passwords #infosec #cybers

This dumb password rule is from Tangerine. Your PIN can only contain numbers and must be between 4 and 6 numbers. https://dumbpasswordrules.com/sites/tangerine/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Canva. Does not show number of characters in the max character limit. https://dumbpasswordrules.com/sites/canva/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Lloyds Bank. Max 15 characters, min 8. You cannot use **ANY** special characters - alpha-numerics only. This amazingly terrible password policy combines with a known phrase (The "Memorable Information") of which you will be asked for a random 3 characters of if you g

This dumb password rule is from Best Buy. You can enter whatever password you like! But you probably don't want to make it too long, because you'll break us and you'll never be able to login again. https://dumbpasswordrules.com/sites/best-buy/ #password #passwords #infosec #cybersecurity #dumbpas

This dumb password rule is from Sunny Portal. The password must consist of at least 10 and at most 50 characters. It must contain at least one special character, one number, one lower-case letter and one upper-case letter. The following characters are permitted for the password: - Lower-case lette

This dumb password rule is from Delta. It's a good thing they don't store personal information such as your passport number... oh wait. https://dumbpasswordrules.com/sites/delta/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Canadian Imperial Bank of Commerce. Letters and numbers only, no symbols. Also an undocumented maximum of 12 characters! https://dumbpasswordrules.com/sites/canadian-imperial-bank-of-commerce/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Dnevnik.ru. Silently (sic!) trim password to 30 symbols. That causes the stupid case when you could successfully registrate an account with password length of 52 and can't login with the password. https://dumbpasswordrules.com/sites/dnevnik-ru/ #password #password

This dumb password rule is from A1 Mobile Serbia. A1 mobile Serbia is a mobile provider in Serbia that imposes poor password rules. Translation: "Length of the password must be between 8 and 20 characters and can only have letters and digits." https://dumbpasswordrules.com/sites/a1-mobile-serbia/

This dumb password rule is from AOK (German Health Insurance). This is the online customer portal of the German health insurance company AOK. They have an extensive set of rules for both passwords and usernames. The password rules are: - Length between 8 and 14 characters - At least one letter, one

This dumb password rule is from TreasuryDirect. Will allow most passwords longer than 8 characters. Doesn't tell you there is a maximum length of 16 characters. Then forces you to type it with an on-screen keyboard with no capital letters. https://dumbpasswordrules.com/sites/treasurydirect/ #pass

This dumb password rule is from Irodoricomics. A website to buy english-localized doujins. The password must be between 4 and 20 characters long https://dumbpasswordrules.com/sites/irodoricomics/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from GoDaddy. Some characters are **too** special. https://dumbpasswordrules.com/sites/godaddy/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from TwinSpires. You can gamble on our site. We'll keep your money secure with a 12 character password! https://dumbpasswordrules.com/sites/twinspires/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Nintendo. Password between 8-20 characters, at least two "categories" of characters, and cannot use the same character more than twice in a row. At least it supports MFA. https://dumbpasswordrules.com/sites/nintendo/ #password #passwords #infosec #cybersecurity #du