We've all been there.

all 26 comments

sorted by: hot top controversial new old
[–] 1 point 3 years ago

That password is already in use by user 'gigachad'.

  • source
  • [–] 1 point 3 years ago

    For those wanting to play this as a game, there is this wonderfully fiendish website.

    https://neal.fun/password-game/

    Rule 13 Your password must include the current phase of the moon as an emoji.

  • source
  • [–] 1 point 3 years ago

    Sorry, you must have a special character. Oh... Not THAT special character, it has to be a special special character, that one isn't valid. Ah, no, that one's too long. It should be shorter. It needs to be between 11 and 11.5 characters.

    Half the time I now just enter random nonsense until it lets me create an account. Then, when I want to access a website/app again, I just 'forget' my password and reset it to some other random nonsense.

  • source
  • [–] 0 points 3 years ago (1 child)

    Looks like someone's been playing the password game https://neal.fun/password-game/

  • source
  • hideshow 1 child comment
  • [–] 0 points 3 years ago (6 children)

    “Sorry, that password is already in use” ruins it for me. That’s not a realistic message to receive.

    Maybe “Your password cannot be one you’ve used previously”.

  • source
  • hideshow 6 child comments
  • [–] 1 point 3 years ago

    It follows the vein of some of the password rules and feedback reducing security itself. Like why disallow any characters or set a maximum password length in double digits? If you're storing a hash of the password, the hash function can handle arbitrary length strings filled with arbitrary characters. They run on files, so even null characters need to work. If you do one hash on the client's side and another one on the server, then all the extra computational power needed for a ridiculously long password will be done by the client's computer.

    And I bet at least one site has used the error message "that password is already in use by " before someone else in the dev team said, "hang on, what?".

  • source
  • parent
  • [–] 0 points 3 years ago (3 children)

    My favorite, though, is:

    types in password "Password incorrect" goes to reset password "please enter a new password" types in password "your new password cannot be the same"

  • source
  • hideshow 3 child comments
  • [–] 0 points 3 years ago (2 children)

    That just means you entered it wrong the first time.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 0 points 3 years ago (1 child)

    It often means that one could have derived the correct password from the set of rules - but those rules are not shown when asking for the old password

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 3 years ago

    Exactly this. I want to normalize showing the password requirements when you don't immediately get the password - if you made me jump through hoops the first time, at least remind me what they were!

  • source
  • parent
  • [–] 0 points 3 years ago (2 children)

    The worst one is when it only supports up to like 16 characters but doesn't tell you so it will only use the first 16 characters and ignore the rest. The next time you need to enter it and get the 64 character password from your password manager it will just say it incorrect and you're left with no idea on why it's wrong.

  • source
  • hideshow 2 child comments
  • [–] 0 points 3 years ago (2 children)

    that password is already in use

    lmao, "security" moment

  • source
  • hideshow 2 child comments
  • [–] 0 points 3 years ago (1 child)

    The worst part is that if they know that password is already in use.... then they aren't storing their passwords appropriately.

  • source
  • hideshow 1 child comment
  • [–] 0 points 3 years ago (1 child)

    Password can't exceed 32 characters

    Garbage

  • source
  • hideshow 1 child comment