Hacker News Reader

My services have three password rules: 1. the password has to be a certain length (8 or more)

2. the password is not allowed to be in the list of the most common passwords

3. username, email or similar is not allowed to be in the password

I have a one-letter "a@domain.com" email address and I often have issues with services saying "your password contains your email address". Basically means that my passwords cannot contain letter "a". Find it amusing since I have to replace all "a"'s in my 1password-generated 30-char password with something else.

Should put a minimum length on that rule

Reply on news.ycombinator.com