I’m lucky my banking app works (GrapheneOS), as it’s now requiring 2FA with the app anytime I login on the browser. Can’t use an actually secure form like TOTP. At least they now allow passwords over 8 characters (yes, serious).

(Meme in comments)

  • Atemu@lemmy.ml
    link
    fedilink
    English
    arrow-up
    79
    ·
    9 months ago

    At least they now allow passwords over 8 characters (yes, serious).

    Are you 100% certain they don’t just truncate your password to 8 characters?

    • RebootRebootReboot@programming.dev
      link
      fedilink
      English
      arrow-up
      45
      ·
      9 months ago

      I’ve seen a website that silently truncated my password during a password reset, but then wouldn’t truncate it during login. It took me a while to figure out why my password never worked.

    • ikidd@lemmy.world
      link
      fedilink
      English
      arrow-up
      15
      ·
      9 months ago

      What, do you think banks have the money for storing all those extra unnecessary characters? MS Access databases are only so powerful.

      • ooterness@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        ·
        9 months ago

        Never ever ever store passwords in the database. Salted hash only. It’s fixed length even if the password is a gigabyte long.

    • BastingChemina@slrpnk.net
      link
      fedilink
      English
      arrow-up
      1
      ·
      9 months ago

      Your bank are allowing you to use characters ? Mine only allows numbers for the password, it has to be 8 number, no less, no more.