this post was submitted on 04 Apr 2022
11 points (100.0% liked)

Lemmy Support

4651 readers
23 users here now

Support / questions about Lemmy.

Matrix Space: #lemmy-space

founded 5 years ago
MODERATORS
dessalines@lemmy.ml
11
Password Length Seemingly Not Enforced On Account Creation (lemmy.ca)
submitted 2 years ago by Tryp@lemmy.ca to c/lemmy_support@lemmy.ml
6 comments fedilink hide all child comments
 

cross-posted from: https://lemmy.ca/post/107103

May have just found out why I've historically had issues logging into my Lemmy accounts.

I was able to create my account fine using a password 65-ish characters in length using letters, numbers and special characters. Then immediately I couldn't login! I use a passwords vault to create/save my accounts fully before I enter my details into the site so the details are correct.

Upon resetting my password and trying a new one with the same parameters I was advised my password was too long (60 max I think it said?). I moved it to 58 characters and also removed special characters then I was able to login fine.

This may have been going on for sometime and across other instances because I was having lots of issues making lemmy accounts before on lemmy.ml.

Anyone else run into this?

top 6 comments
sorted by: hot top controversial new old
[–] mekhos@lemmy.ml 2 points 2 years ago (2 children)

65-ish characters in length using letters, numbers and special characters

You monster!

[–] comfy@lemmy.ml 2 points 2 years ago

you mean you don't have a keyboard with a macro key that types the first three lines of your tenth favorite song to begin all your passwords? enjoy getting h4ck3d!1

[–] Tryp@lemmy.ca 2 points 2 years ago

You watch your mouth or I'll start putting spaces in all my passwords! Lazy admins of the world will fear me!

[–] dessalines@lemmy.ml 2 points 2 years ago (1 children)

We check the password length when creating new accounts:

https://github.com/LemmyNet/lemmy/blob/cb44b1471705de503e609fbd835fca2a77cce2db/crates/api_crud/src/user/create.rs#L71

And when updating the password:

https://github.com/LemmyNet/lemmy/blob/cb44b1471705de503e609fbd835fca2a77cce2db/crates/api_crud/src/user/create.rs#L71

So I'm not sure how you are able to do this, I'm guessing it was before we added those checks.

[–] Tryp@lemmy.ca 1 points 2 years ago (1 children)

I'll do some more testing and get back ya on this maybe I'm jumping the gun.

my posts is also confusing because I crossposted it, this happened on lemmy.ca but I believe it's happened elsewhere just not confirmed.

When were those added?

[–] dessalines@lemmy.ml 1 points 2 years ago

Few months ago I think.