I’m lucky my banking app works (GrapheneOS), as it’s now requiring 2FA with the app anytime I login on the browser. Can’t use an actually secure form like TOTP. At least they now allow passwords over 8 characters (yes, serious).

  • Atemu@lemmy.mlEnglish
    0·
    1 year ago

    At least they now allow passwords over 8 characters (yes, serious).

    Are you 100% certain they don’t just truncate your password to 8 characters?

    • RebootRebootReboot@programming.devEnglish
      0·
      1 year ago

      I’ve seen a website that silently truncated my password during a password reset, but then wouldn’t truncate it during login. It took me a while to figure out why my password never worked.

    • ikidd@lemmy.worldEnglish
      0·
      1 year ago

      What, do you think banks have the money for storing all those extra unnecessary characters? MS Access databases are only so powerful.

      • ooterness@lemmy.worldEnglish
        0·
        1 year ago

        Never ever ever store passwords in the database. Salted hash only. It’s fixed length even if the password is a gigabyte long.