Hacker News Reader

Sadly most websites will scream at you if you don't follow their weird and sometimes arbitrary recipe (exactly one special character). This is great for when it's actually allowed

View on HN

I usually just add a standard set of numbers and special characters at the end of an otherwise secure password to appease the complexity gods.

P@55w0rd --- excellent

wriggler-airborne-genealogy-wainscotings --- awful

I hate how they connect those words, i much prefer the random choices that i can get from 1Password: WRIGGLER$airborne2GENEALOGY!wainscotings

Now, i have had several sites that i cant accept passwords longer then 16 or 20 characters so i have to return to P@55w0rd like passwords (random, not work based).

I stumbled upon a few sites which have slightly different rules on registration page comparing to login. On registration page the password is length limited and they cut off the excess without saying. But on login page they don't do that so the password you pasted no longer works

You're falling for the same errors that xkcd pointed out in the first place.

Adding different connectors and different cases adds a lot more to remember and hardly any extra entropy

I used to do that too, capitalizing the first letter and appending 1.

Reply on news.ycombinator.com