Maximum of 12 characters for passwords on redbox.com
Another site with odd password policies, redbox.com. Requiring a minimum password length is a good idea, though you could argue that six is too small. But why limit the maximum password length to 12 characters? Any site that has a maximum password restriction below 50 characters has me wondering how exactly they are managing password storage and security.
Joseph
I just sent an email to Scott at Redbox (their API lead) to have him look at your post and address this as it will certainly be a growing concern for the tech community.
Thanks for being on top of these things!
Would be great to see them fix this.
Good catch! I’ve had services tell me storage is an issue here before which sends me running as, well, that’s what hashes are for….