@dumbpasswordrules@infosec.exchange

Dumb Password Rules @dumbpasswordrules@infosec.exchange · 4d ago

This dumb password rule is from Netflix.

The help page and the password reset page say:

Ihr Passwort muss zwischen 4 und 60 Zeichen lang sein und darf keine Tilde (~) enthalten.

https://dumbpasswordrules.com/sites/netflix/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

Hilfe-Center

Netflix-Meldung „Ihr Passwort muss zwischen 6 und 60 Zeichen lang sein“

Wenn die Fehlermeldung „Ihr Passwort muss zwischen 6 und 60 Zeichen lang sein“ angezeigt wird, kann Ihnen dieser Artikel bei der Fehlerbehebung helfen.

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Aug 05, 2026

This dumb password rule is from Apple. Can't contain 3 or more consecutive identical characters, nor can it be more than 63 characters long. https://dumbpasswordrules.com/sites/apple/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Aug 04, 2026

This dumb password rule is from Moose Mobile. Moose mobile is an Australian mobile service provider that imposes poor password requirements. "The password must be of minimum 4 and maximum 15 characters. The Confirm Password field may only contain alpha-numeric characters." https://dumbpasswordrules.com/sites/moose-mobile/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

dumbpasswordrules.com

Moose Mobile - Dumb Password Rules

Moose mobile is an Australian mobile service provider that imposes poor password requirements. "The password must be of minimum 4 and maximum 15 characters. The Confirm Password field may only contain

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Aug 03, 2026

This dumb password rule is from La Banque Postale. Password must be 6 digits and entered on custom pad. https://dumbpasswordrules.com/sites/la-banque-postale/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Aug 03, 2026

This dumb password rule is from WellStar MyChart. Your password must be between 8 and 20 characters. https://dumbpasswordrules.com/sites/wellstar-mychart/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 31, 2026

This dumb password rule is from GoDaddy.

Some characters are too special.

https://dumbpasswordrules.com/sites/godaddy/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

dumbpasswordrules.com

GoDaddy - Dumb Password Rules

Some characters are **too** special.

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 31, 2026

This dumb password rule is from Hetzner.

8 or more characters
At least one uppercase and one lowercase letter
At least one number or special character

Okay, fair enough, but after putting in a password with some special characters this message appears:

Invalid characters, allowed are: A-Z a-z 0-9 ä ö ü ß Ä Ö Ü ^ ! $ % / ( ) = ?...

https://dumbpasswordrules.com/sites/hetzner/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

dumbpasswordrules.com

Hetzner - Dumb Password Rules

- 8 or more characters - At least one uppercase and one lowercase letter - At least one number or special character Okay, fair enough, but after putting in a password with some special characters thi

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 30, 2026

This dumb password rule is from PCPartPicker. There are no rules for passwords. Passwords can be any length (including one character) of any complexity. No password change confirmation emails are sent. https://dumbpasswordrules.com/sites/pcpartpicker/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

dumbpasswordrules.com

PCPartPicker - Dumb Password Rules

There are no rules for passwords. Passwords can be any length (including one character) of any complexity. No password change confirmation emails are sent.

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 29, 2026

This dumb password rule is from Targobank.

Your password must:

must not be your username
must at least eight characters
must contain at least one number character
must contain at least one uppercase character and 1 lowercase character
must not contain spaces
must not contain three identical characters in a row
must not conta...

https://dumbpasswordrules.com/sites/targobank/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

dumbpasswordrules.com

Targobank - Dumb Password Rules

Your password must: - must not be your username - must at least eight characters - must contain at least one number character - must contain at least one uppercase character and 1 lowercase character

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 28, 2026

This dumb password rule is from Credit Union Australia (CUA) Health. Password must be between 7 and 10 characters, contain both an uppercase and a lowercase letter and have at least one number. https://dumbpasswordrules.com/sites/credit-union-australia-cua-health/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

dumbpasswordrules.com

Credit Union Australia (CUA) Health - Dumb Password Rules

Password must be between 7 and 10 characters, contain both an uppercase and a lowercase letter and have at least one number.

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 28, 2026

This dumb password rule is from Really Useful Storage Boxes.

Have a length between 8 and 20 alphanumeric characters (without accents)
Contain at least 1 CAPITAL letter
Contain at least 1 lowercase letter
Contain at least 1 numeric character
Contain at least 1 special character taken from the following list: *$@&()[]{}=#.-!?+/£€%

https://dumbpasswordrules.com/sites/really-useful-storage-boxes/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

dumbpasswordrules.com

Really Useful Storage Boxes - Dumb Password Rules

- Have a length between 8 and 20 alphanumeric characters (without accents) - Contain at least 1 CAPITAL letter - Contain at least 1 lowercase letter - Contain at least 1 numeric character - Contain at

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 27, 2026

This dumb password rule is from Combank Digital. Only a staggering 8-12 characters allowed with prescribed selection of special characters. https://dumbpasswordrules.com/sites/combank-digital/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 27, 2026

This dumb password rule is from Twilio. Restriction in inclusion of characters such as 'Twilio' in password. Password must be 16 or more characters & Can't include 3 or more consecutive repeated characters. https://dumbpasswordrules.com/sites/twilio/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 26, 2026

This dumb password rule is from University of Western Australia (Pheme).

Passwords:

Must contain at least 8 characters;
Must contain at least 3 out of 4 types of characters (uppercase letters, lowercase letters, digits, special characters); and
Must not contain "the user's account name or parts of the user's full name that exceed two consecutive characters". ...

https://dumbpasswordrules.com/sites/university-of-western-australia-pheme/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 26, 2026

This dumb password rule is from Air France.

Between 8 to 12 characters
Should contain capital, lowercase letters and numbers

https://dumbpasswordrules.com/sites/air-france/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 25, 2026

This dumb password rule is from CAF (French Family Allowance Fund). You have to enter your 8-digit password using this Frenchy keypad. https://dumbpasswordrules.com/sites/caf-french-family-allowance-fund/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 24, 2026

This dumb password rule is from Sephora. Password must be between 6 and 12 characters. No other rules specified. https://dumbpasswordrules.com/sites/sephora/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 23, 2026

This dumb password rule is from KPMG Talent Community.

While stating otherwise, the site actually accepts a backslash in the password and displays a forward slash as the example of the disallowed backslash Password:

Must be at least 8 characters long
Must contain at least 1 number
Must contain at least 1 letter
Must contain at least 1 spec...

https://dumbpasswordrules.com/sites/kpmg-talent-community/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 23, 2026

This dumb password rule is from Dutch Tax Authorities (Belastingdienst). At least 8 and at most 25 characters, of which at least 3 of the characters were not used in the previous password. No more than 3 of the same characters. At least 1 upper case and 4 lower case characters. No more than 3 special characters. It's not like hashing passwords is a thing or something. https://dumbpasswordrules.com/sites/dutch-tax-authorities-belastingdienst/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 21, 2026

This dumb password rule is from Waze. After you request a password reset and you receive an email with instructions and link to reset your password, you are presented with this password reset form. Your password length is limited between 8 and 16 characters. Additionally the form breaks with an error if you use any special characters... https://dumbpasswordrules.com/sites/waze/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 21, 2026

This dumb password rule is from BBVA.

Username is your national ID (easy to find) and your password must have up to 6 alphanumeric characters only. For a bank account with all your money in one of the largest financial institutions in the world.

https://dumbpasswordrules.com/sites/bbva/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 20, 2026

This dumb password rule is from Battle.net. 8 to 16 characters, at least one number and one letter and last but not least NO special characters, and can't have a password that looks like your username too. Oh, and passwords are NOT case sensitive. A real time travel adventure through the password rules of 2005! https://dumbpasswordrules.com/sites/battle-net/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 19, 2026

This dumb password rule is from Copart. Copart: "The security of our members is extremely important to us." Also Copart: "We're gonna need you to keep your password between 5-10 characters." https://dumbpasswordrules.com/sites/copart/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 18, 2026

This dumb password rule is from Netflix.

The help page and the password reset page say:

Ihr Passwort muss zwischen 4 und 60 Zeichen lang sein und darf keine Tilde (~) enthalten.

https://dumbpasswordrules.com/sites/netflix/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 18, 2026

This dumb password rule is from SONY.

between 8 and 30 characters
at least one number or special character
not part of email address
avoid common passwords
repeating characters 3 or more times should be avoided
currency characters and 3 or more consecutive characters, also in reverse order, should be avoided Somehow "$" i...

https://dumbpasswordrules.com/sites/sony/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 17, 2026

This dumb password rule is from Rushmore Loan Management Services. Hmmm.. why are they afraid of double and single quotes in my passwords? https://dumbpasswordrules.com/sites/rushmore-loan-management-services/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

0

1

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 17, 2026

This dumb password rule is from Fidelity National Information Services.

White label online banking provider. Typically appears as BANK.ibanking-services.com or BANK.ebanking-services.com. If your small local bank has a crappy online banking experience, these guys probably provide it.

\<>' and spaces prohibited, upper bound. Passwords of exactly the maximum len...

https://dumbpasswordrules.com/sites/fidelity-national-information-services/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 16, 2026

This dumb password rule is from Eurocircuits. Minimum 4 and maximum 30 chars. Use only letters (a-z), numbers (0-9) and underscore (_) https://dumbpasswordrules.com/sites/eurocircuits/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 16, 2026

This dumb password rule is from Virgin Trains. Your password needs to be between 8 and 10 characters long. Previously this would silently truncate the password without warning, causing confusion when the password wouldn't work. https://dumbpasswordrules.com/sites/virgin-trains/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 15, 2026

This dumb password rule is from Sharekhan.

At least 8 characters.
At most 12 characters.

https://dumbpasswordrules.com/sites/sharekhan/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 14, 2026

This dumb password rule is from Pole-Emploi.

Password must contain at least one letter, one number and one character from &-_@*%=.,;:!? only. It rejected passwords generated by pass, while accepting p@ssw0rd!... They also block pasting on the password confirmation field, forcing you to manually type your 32-letters-long generated passwo...

https://dumbpasswordrules.com/sites/pole-emploi/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 13, 2026

This dumb password rule is from EllieMae Access. Must reset password every 6 months and password requirements are not displayed _anywhere_. Reset uses a Security Question, and you have to choose from a list of 5. https://dumbpasswordrules.com/sites/elliemae-access/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 12, 2026

This dumb password rule is from Movistar. Min 7 and max 8 characters for password! Also to be different than the username: the user name is automatically generated and is based on the surname of the user with some characters replaced by digits :) Has been that way for more than 10 years. https://dumbpasswordrules.com/sites/movistar/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 11, 2026

This dumb password rule is from Wageworks.

In addition to the following rules regarding passwords...

8-20 characters in length
Include at least 4 of the following: lowercase letter, uppercase letter, number AND symbol
Not include your last name, first name or space

Your new password should be different from your previous twenty pas...

https://dumbpasswordrules.com/sites/wageworks/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 11, 2026

This dumb password rule is from University of Texas at Austin.

Because of the last two rules, which ban dictionary words and any variants using symbol substitutions, neither of the passwords presented in the xkcd comic are allowed.

https://dumbpasswordrules.com/sites/university-of-texas-at-austin/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

0

1

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 06, 2026

This dumb password rule is from State Bank of India (Foreign Travel Card).

State Bank of India is the largest government operated bank in India. They offer "travel" prepaid cards for foreign currencies, this is for their portal for the prepaid card users to manage their account.

Your password must:

Be between 8 and 9 characters long
Contain at least 1 lowercase c...

https://dumbpasswordrules.com/sites/state-bank-of-india-foreign-travel-card/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 06, 2026

This dumb password rule is from AmiAmi. Your password needs to be between 6 and 12 characters long, must contain only letters and numbers. https://dumbpasswordrules.com/sites/amiami/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 05, 2026

This dumb password rule is from E-Trade.

Causes:

Your two-factor authentication code must be appended to the end of the password
Passwords have a limit of 32 characters

Effect:

If your account has a 32-character password and has two-factor authentication, their system appears to cut off the token, making it impossible to login. Yo...

https://dumbpasswordrules.com/sites/e-trade/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

0

1

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 05, 2026

This dumb password rule is from Nelnet (student loan servicer). 8 to 15 characters and no spaces? Why no spaces? Also limited to only these 6 special characters. That could mean that there is some process somewhere that puts this as part of a command line invocation. https://dumbpasswordrules.com/sites/nelnet-student-loan-servicer/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 04, 2026

This dumb password rule is from Best Buy. You can enter whatever password you like! But you probably don't want to make it too long, because you'll break us and you'll never be able to login again. https://dumbpasswordrules.com/sites/best-buy/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

1

0

2

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 04, 2026

This dumb password rule is from AOK (German Health Insurance).

This is the online customer portal of the German health insurance company AOK. They have an extensive set of rules for both passwords and usernames.
The password rules are:
- Length between 8 and 14 characters
- At least one letter, one number and one special character
- Special characters are: !...

https://dumbpasswordrules.com/sites/aok-german-health-insurance/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 03, 2026

This dumb password rule is from Intelink Passport. Intelink is a group of "secure" intranets used by the United States Intelligence Community. Passport is an identity and access management service for Intelink. Rule #3 prohibits three or more consecutive uppercase, lowercase, or digit characters, even if those characters are not the same. For ex... https://dumbpasswordrules.com/sites/intelink-passport/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

0

2

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 03, 2026

This dumb password rule is from Trade Me. Won't allow spaces or single quotes. Maybe other characters as well - they do not say up front - but the password they accepted contained lots of other special characters. https://dumbpasswordrules.com/sites/trade-me/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 02, 2026

This dumb password rule is from Rediff.

A maximum password length of 12. The hidden requirements are:

at least 1 uppercase letter
at least 1 lowercase letter
at least 1 numeric character
at least 1 special symbol (which can not be ^, %)

https://dumbpasswordrules.com/sites/rediff/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 02, 2026

This dumb password rule is from SAS Eurobonus. The best thing about rules, is that you can multiple different ones! Like SAS that allows you to have a long password at least when signing up, but you'll be sorry if you want to change your password later on. https://dumbpasswordrules.com/sites/sas-eurobonus/ #password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 01, 2026

This dumb password rule is from WellStar MyChart.

Your password must be between 8 and 20 characters.

https://dumbpasswordrules.com/sites/wellstar-mychart/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

dumbpasswordrules.com

WellStar MyChart - Dumb Password Rules

Your password must be between 8 and 20 characters.

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jul 01, 2026

This dumb password rule is from Estheticon.

- At least 8 characters but limited to 20 characters at max
- At least 1 digit
- At least one letter (just a letter in general, no specific casing required)
- No special characters at all

https://dumbpasswordrules.com/sites/estheticon/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

0

Dumb Password Rules @dumbpasswordrules@infosec.exchange · Jun 30, 2026

This dumb password rule is from Citi.

* Password is case-insensitive
* Can't use ANY special characters (although, adding special characters increases the "password strength" meter?!)
* Allows for a minimum password length of 6 characters
* No runs of more than two identical characters (eg. "aaa" is not allowed.)
* Does not allow you...

https://dumbpasswordrules.com/sites/citi/

#password #passwords #infosec #cybersecurity #dumbpasswordrules