Post #1155838

2026-04-13 03:05 UTC

I went to renew my Costco membership today. First link on the homepage is &quot;renew your membership now&quot;. That&#39;s convenient. I guess people go there to do that a lot. I like that UI design. The page asks me to log in. My Bitwarden vault already has a password for Costco, so I autofill it. Before I can even hit &quot;submit&quot;, it says &quot;Your password is incorrect&quot; and steals keyboard focus to do so. I tried to log in anyway, and sure enough, it was wrong. I have no idea why. So I hit the &quot;forgot tpassword&quot; button even though it is literally impossible for my web vault to have &quot;forgotten&quot; my password. I accidentally type in my email to a text field that already got prefilled with my email but didn&#39;t highlight it by default. I get a verification code buried in at least three nested tables. I curse NVDA once again for not resolving the almost-decade-old issue that would allow me to sanely create a Thunderbird config profile to turn off all the excess announcements. But at least the email didn&#39;t arrive 11 minutes later with a 10 minute expiration. It&#39;s the small things. Since apparently my vault doesn&#39;t have the correct password, I just autofilled the &quot;set new password&quot; screen. And then the site told me my password was too long. It was 20 characters; their limit is apparently 16. One of their tips for making it stronger was &quot;use a longer password&quot;, so that&#39;s pretty confusing. Maybe they just tell everyone that. &quot;You used a 350 character password and the limit is 16. Try making it longer!&quot;. So I did what any reasonable person would do, and chopped off the last four characters of the password and pressed &quot;Update&quot;. And that&#39;s when the website told me the form couldn&#39;t be submitted because it was &quot;missing the login name.&quot; There is no text field for entering the login name. All I could do was go back to the login page, make sure the 16-character version of my password didn&#39;t work already, and hit the &quot;forgot&quot; button again. This time, and every other subsequent time, when I entered the verification code from my email, the site loaded a blank page. I give up. The entire web can just fuck right off for the rest of the night.

Replies (10)

@SeveraSnape@mastodon.social 2026-04-13 03:36

@simon Aw man. :( sorry that happened to you. What a pain!

Open ##1411490
@SeveraSnape@mastodon.social 2026-04-13 03:37

@simon I suggest reading a good Fanfic! hahahha

Open ##1411491
@KaraLG84@dragonscave.space 2026-04-13 05:57

@simon What a pain in the arse.

Open ##1411492
@ner@fwoof.space 2026-04-13 06:01

@simon @jaybird110127 i see this junk all the time, when your password manager fills a password and rather than giving you an error that your password you've been using forever is no longer valid due to having an arbitrary 16 char limit, it just, to steal a term from my 13 year old daughter, just crashes out. Why have limits for password lengths? I don't know from a programatic point of view why they do it except to make stored hashes shorter. You can't even say that they don't want to spend ten minutes on a customer service call reading passwords to the rep and back again, usually you'll just get a forgot password email and you do it yourself. Truly stupid I tell you.O

Open ##1411493
@tfb@functional.cafe 2026-04-13 07:38

@simon Websites that lie about "incorrect" passwords are an absolute plague. I have no idea what's going on there, but I encounter it quite a bit too

Open ##1411494
@fireborn@dragonscave.space 2026-04-13 10:32

@simon What a giant pile of shit.

Open ##1411495
@WeirdWriter@caneandable.social 2026-04-13 11:04

@simon In thunderbird, to avoid those nested things, Go to, view, read message as, change it to plain text. Best decision I ever made.

Open ##1411496
@crowdotblack@pdx.social 2026-04-14 14:19

@simon I have had this exact problem. The only solution for me was to change browsers

Open ##1411498
@SerenaTori@dragonscave.space 2026-04-14 23:45

@simon Yeah, that’s honestly how I feel with a lot of web stuff these days, my patience for it is growing thinner and thinner.

Open ##1411500
@targetdrone@mastodon.social 2026-04-15 04:23

@simon I ran into the same thing (might have been on a different site), where the password autofill was either inserting nothing, or entering something wrong, and the login page was preventing copy-paste from working, obviously to "protect my security". I ended up running the Bitwarden GUI and flipping the screens back and forth to type the password 4 letters at a time. I hope those developers spill a jar of honey in their laps, and there's an ant colony under their desks.

Open ##1411502