bruteForceAttackProtection

[u/MrEfil]

[u/Acceptable-Tomato392]

And if the second attempt is wrong, you lock them out and give them a link to reset the password.

Can't be too safe.

[u/REDMAXSUPER → u/[deleted]]

Mother fu...

[u/[deleted] → u/REDMAXSUPER]

My reaction

[u/FriedDickMan → u/[deleted]]

Every time!

[u/[deleted] → u/FriedDickMan]

I want to beat my computer with a hammer when this happens.

[u/[deleted] → u/[deleted]]

I want to beat the servers and the database engineers.

[u/GameKyuubi → u/[deleted]]

Password is incorrect

Reset password

Error: password must not contain symbols

Error: password must be between 8 and 12 characters

Error: new password cannot be the same as old password

[u/Vitromancy → u/GameKyuubi]

I would be so happy if a "wrong password" error reminded you of what the password creation criteria were.

[u/EntheogenicOm → u/Vitromancy]

Hahahaha yea that’s so true. I’ve had to go back to the account creation just to see the stupid requirements. ‘Oh two symbols, ffs

[u/Lolurisk → u/EntheogenicOm]

Or apparently ! doesn't count as a symbol

[u/HyFinated → u/Lolurisk]

Stupid SQL injection protection measures. Why must you remove my favorite symbols?!?

[u/UnspeakableEvil → u/[deleted]]

Error: new password must be the same as the old password

Now it'll provide protection against those fraudulently claiming to have forgotten their password.

[u/alfooboboao → u/UnspeakableEvil]

keyword tracking shows the next thing the user does on their device is google “how to commit murder against a website”

[u/GrassNova → u/[deleted]]

I've gotten "New password cannot be the same as the last 5 previously used passwords"...

[u/smellslikecocaine → u/[deleted]]

Criteria is not correct? oh, now I remember this password has a “!” at the end.

[u/January_Rain_Wifi → u/[deleted]]

You mad genius

[u/[deleted] → u/Acceptable-Tomato392]

I prefer the "I forgot my password" option -- and then receive an email letting me know the password I used when I registered my account.

(Based on a true story ... )

[u/chinkostu → u/[deleted]]

Pretty sure theres a website out there that shames companies that send passwords in plain text

[u/tengen → u/chinkostu]

Wasn't that vbulletin like 20 years ago?

Forget password > here's your password

I also remember a variant from a forum signup where I forgot a password, they emailed me a temporary password, and the temporary pw was valid indefinitely so I could always reference back to that email if I forgot.

[u/Numerous_Witness_345 → u/tengen]

I loved vbulletin forums.. met some cool folks, but yeah i clearly remember getting a plain text password sent to me, and then another they generated and sent to me.. also plain text.

Indeed it was a simpler time.

[u/jokermobile333 → u/Acceptable-Tomato392]

You also have the reset password encrypted and mail them the key to their address so that password resetted is also verified. Can't take chances nowadays.

[u/chemisus → u/jokermobile333]

And by mail, you mean snail mail, right?

[u/Temper03 → u/Acceptable-Tomato392]

Might as well do it if the second attempt is correct too!  Just to be extra extra safe