Password Shaming

Websites with bad password requirements. Submissions welcome and encouraged.

[passwordshaming]

Ticketfly

No more than 20 characters in password.

[passwordshaming]

20 character limit isn’t secure enough.

[passwordshaming]

[passwordshaming]

c'mon Shutterfly, you really gonna play me like that?

[passwordshaming]

Do they tell you what characters are and are not allowed? Haha, no.

[passwordshaming]

Credit Union Australia Health

Max of 10 characters, also prohibits at least some symbols

[passwordshaming]

Log in using a 6-digit password and your handle, email OR phone number. What could possibly go wrong, thank god twitter handles cant be worth 10s of thousands of dollars, OH SNAP

Nice way to try and scoop up a couple more users at any cost, including the safety of their accounts.

[passwordshaming]

Japan Airlines is moving away from PINs to passwords and they wrote a novella to tell you all about it. 

Arigato, but I know how to create my own password, just don’t tell me how long to make it.

[passwordshaming]

Cool, I’ll just sit and guess till I get lucky.

[passwordshaming]

The fifteen character and symbol limits would be bad enough on their own.  For extra idiocy, though, they made their passwords case insensitive.

[passwordshaming]

Oh stamps.com, where to even begin?  It waits until after you've pasted in your generated password to tell you that nope, too long.  And then after you try again and trip it down to the required 14 character (14?!) maximum... surprise!  We have other, secret requirements:

[passwordshaming]

DisHHonors

The signup page for the Hilton HHonors customer loyalty program.

[passwordshaming]

Bright Talk

[passwordshaming]

Thank you, Virgin, but just step me though it as I type if it isn’t strong enough. I don’t have time to read your white papers.

[passwordshaming]

WTF, Microsoft?

[passwordshaming]

An open letter to banks

TD Canada Trust made quite a splash recently when it launched its redesigned iPhone app which disabled pasting in the password field. Users who embrace password managers for their online security w...

[passwordshaming]

Texas Instruments myTI account

Who: Texas Instruments

What: Maximum character count of 12 chars