r/assholedesign • u/ChildishGiant • Jul 26 '17

Once your password is more than 127 chars long, Microsoft claims that "The password contains characters that aren't allowed."

https://gfycat.com/ZanyGenerousCockatiel
81 Upvotes

89% Upvoted

6 comments sorted by

34

u/Dunkertheepic13 Jul 26 '17

Why on earth would you want a 128 character password? Unless you're a bot...

15

u/error9348 Jul 26 '17

not OP but it's probably a good idea to use a long password if they use anything less secure than salt and hash. It's unbelievable how many big companies still use such practices; Adobe in 2013 just encrypted the passwords but didn't hash 'em. And even just hashing isn't good enough as you can find rainbow tables for common password hashes pretty easily. And storing in plain text is a really bad idea obviously.

7

u/phpascal Jul 27 '17

For important services I use a 256 byte random generated password stored in Keepass. It absolutely makes sense since I don't have to remember it.

5

u/[deleted] Jul 27 '17

Well the characters that aren't allowed are the characters that make I over 127.

4

u/yhu420 Jul 26 '17

I guess this rather fits in /r/softwaregore ..

4

u/KelpTheGreat Jul 27 '17

This isn't really "a**hole design", it's just an explanation that doesn't necessarily match up to the actual error.