#dumbpasswordrules

2025-12-21

This dumb password rule is from Telcel.

- The username is the cell phone number (easy to get)
- The company creates a password between 8 and 12 characters for you
- Password must contain at least 1 capital letter and no special characters

dumbpasswordrules.com/sites/te

#password #passwords #infosec #cybersecurity #dumbpasswordrules

2025-12-21

This dumb password rule is from Inpost.

Allows between 8 to 16 characters. Password is being used to log in and view packages sent to you, or for shipping packages.

dumbpasswordrules.com/sites/in

#password #passwords #infosec #cybersecurity #dumbpasswordrules

2025-12-20

This dumb password rule is from Wells Fargo.

Your password must be between 8-32 characters long and inexplicably doesn't accept `-` but does seemingly accept other special characters.

dumbpasswordrules.com/sites/we

#password #passwords #infosec #cybersecurity #dumbpasswordrules

2025-12-20

This dumb password rule is from GoFundMe.

- At least one uppercase and one lowercase letter
- At least one number and one special symbol
- Does not specify which characters are considered special symbols; did not recognize spaces as special symbols

dumbpasswordrules.com/sites/go

#password #passwords #infosec #cybersecurity #dumbpasswordrules

2025-12-19

This dumb password rule is from TwinSpires.

You can gamble on our site. We'll keep your money secure with a 12 character password!

dumbpasswordrules.com/sites/tw

#password #passwords #infosec #cybersecurity #dumbpasswordrules

2025-12-19

This dumb password rule is from GameFly.

Password is 6-12 characters with no other restrictions. You can easily do 6 numbers, 6 lowercase letters, etc.

dumbpasswordrules.com/sites/ga

#password #passwords #infosec #cybersecurity #dumbpasswordrules

2025-12-18
2025-12-18

This dumb password rule is from Williams-Sonoma.

25 maximum characters and disallowing some specials.

dumbpasswordrules.com/sites/wi

#password #passwords #infosec #cybersecurity #dumbpasswordrules

2025-12-17
2025-12-17

This dumb password rule is from Craigslist.

No minimum character limit meaning you can go as low as 5 characters for a password

dumbpasswordrules.com/sites/cr

#password #passwords #infosec #cybersecurity #dumbpasswordrules

2025-12-16

This dumb password rule is from Dwr Cymru (Welsh Water).

Limits password length to a maximum of 16 characters

dumbpasswordrules.com/sites/dw

#password #passwords #infosec #cybersecurity #dumbpasswordrules

2025-12-16

This dumb password rule is from Fundatec.

Must be exactly 6 alphanumeric characters, does not show special characters are not allowed, username is your social security number (easily searchable) and the form is sent over plain HTTP. Did I mention this company applies college entrance exams for **Computer Science** nationwide in Brazil?

dumbpasswordrules.com/sites/fu

#password #passwords #infosec #cybersecurity #dumbpasswordrules

2025-12-15

This dumb password rule is from University of Western Australia (Pheme).

Passwords:
1. Must contain at least 8 characters;
2. Must contain at least 3 out of 4 types of characters
(uppercase letters, lowercase letters, digits, special characters);
and
3. Must not contain
"the user's account name or parts of the user's full name
that exceed two consecutive characters".
...

dumbpasswordrules.com/sites/un

#password #passwords #infosec #cybersecurity #dumbpasswordrules

2025-12-15

This dumb password rule is from GameFly.

Password is 6-12 characters with no other restrictions. You can easily do 6 numbers, 6 lowercase letters, etc.

dumbpasswordrules.com/sites/ga

#password #passwords #infosec #cybersecurity #dumbpasswordrules

2025-12-14

This dumb password rule is from Telekom/T-Systems MyWorkplace.

Telekom's MyWorkplace is a Single Sign On / login hub for their
Open Telekom Cloud which is basically an Amazon AWS clone. It's
rather new and especially for business customers. Especially
because it is for business customers, there's absolutely no reason
to limit a password to 16 characters. Eve...

dumbpasswordrules.com/sites/te

#password #passwords #infosec #cybersecurity #dumbpasswordrules

2025-12-14

This dumb password rule is from Targobank.

Your password must:
- must not be your username
- must at least eight characters
- must contain at least one number character
- must contain at least one uppercase character and 1 lowercase character
- must not contain spaces
- must not contain three identical characters in a row
- must not conta...

dumbpasswordrules.com/sites/ta

#password #passwords #infosec #cybersecurity #dumbpasswordrules

2025-12-13

This dumb password rule is from Minnesota Unemployment Insurance.

Locked to *exactly* 6 chars, alphanumeric only, not special chars.

dumbpasswordrules.com/sites/mi

#password #passwords #infosec #cybersecurity #dumbpasswordrules

2025-12-13

This dumb password rule is from Copart.

Copart: "The security of our members is extremely important to us."
Also Copart: "We're gonna need you to keep your password between 5-10 characters."

dumbpasswordrules.com/sites/co

#password #passwords #infosec #cybersecurity #dumbpasswordrules

2025-12-12

This dumb password rule is from Bank of America.

20 character max and lots of special character restrictions.
Bank of America - keeping your money safe.

Also: If you paste a password greater than 20 characters,
the form truncates it without telling you or giving an
error.

dumbpasswordrules.com/sites/ba

#password #passwords #infosec #cybersecurity #dumbpasswordrules

2025-12-12

This dumb password rule is from PagoMisCuentas.

Password must be between 8 and 15 alphanumeric characters, and have
at least one uppercase and one lowercase letter.

dumbpasswordrules.com/sites/pa

#password #passwords #infosec #cybersecurity #dumbpasswordrules

Client Info

Server: https://mastodon.social
Version: 2025.07
Repository: https://github.com/cyevgeniy/lmst