On: The Dirty Truth About Web Passwords

[sjs]

Unfortunately some crappy site is going to thwart such an effort. "bzzz! you can only use 12 chars in your password" or "you have to use a symbol/uppercase letter" or some other lunacy. le sigh

[run4yourlives → sjs]

And that site will more than likely be your bank to boot.

[sjs → run4yourlives]

I have a feeling that some old bank software has fixed size fields and that's we get ridiculous maximum lengths on bank passwords.