undefined | Better HN

0 pointshrishios5y ago0 comments

How do you have case-insensitive passwords? Does it all get smooshed to lowercase before it's salted and hashed?

0 comments

3 comments · 2 top-level

diroussel5y ago· 1 in thread

I think he means the password complexity policy is only measuring length, and doesn’t distinguish between upper and lower case. Not that the case doesn’t matter in the password. Just in the policy.

zrobotics5y ago

Don't know about employee passwords, but for Wells Fargo the online login passwords are case insensitive. I assume this is due to some legacy system somewhere, but for their system password = PASSWORD = PaSsWoRd. One of the many reasons I no longer bank with them.

war10255y ago

Sounds like the easiest way to handle it to me.

j / k navigate · click thread line to collapse