@volpeon @dumbpasswordrules Throwback to that time I clicked forgot password on an agency’s website that’ll remain nameless and they emailed me my current password in plaintext.
That should not be possible
Do not pass go
Do not collect $200
That should not be possible
Do not pass go
Do not collect $200
September 24, 2026 at 1:13 AM
@volpeon @dumbpasswordrules Throwback to that time I clicked forgot password on an agency’s website that’ll remain nameless and they emailed me my current password in plaintext.
That should not be possible
Do not pass go
Do not collect $200
That should not be possible
Do not pass go
Do not collect $200
You just know they store passwords as clear text in a CHAR(8) column
RE: infosec.exchange/users/dumbpasswordrules/statuses/117319284365355840
RE: infosec.exchange/users/dumbpasswordrules/statuses/117319284365355840
infosec.exchange
September 23, 2026 at 8:03 AM
You just know they store passwords as clear text in a CHAR(8) column
RE: infosec.exchange/users/dumbpasswordrules/statuses/117319284365355840
RE: infosec.exchange/users/dumbpasswordrules/statuses/117319284365355840
This dumb password rule is from Apple.
Can't contain 3 or more consecutive identical characters, nor can it be more than 63 characters long.
https://dumbpasswordrules.com/sites/apple/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Can't contain 3 or more consecutive identical characters, nor can it be more than 63 characters long.
https://dumbpasswordrules.com/sites/apple/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Apple - Dumb Password Rules
Can't contain 3 or more consecutive identical characters, nor can it be more than 63 characters long.
dumbpasswordrules.com
September 27, 2026 at 8:32 AM
This dumb password rule is from Apple.
Can't contain 3 or more consecutive identical characters, nor can it be more than 63 characters long.
https://dumbpasswordrules.com/sites/apple/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Can't contain 3 or more consecutive identical characters, nor can it be more than 63 characters long.
https://dumbpasswordrules.com/sites/apple/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
This dumb password rule is from Tangerine.
Your PIN can only contain numbers and must be between 4 and 6 numbers.
https://dumbpasswordrules.com/sites/tangerine/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Your PIN can only contain numbers and must be between 4 and 6 numbers.
https://dumbpasswordrules.com/sites/tangerine/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Tangerine - Dumb Password Rules
Your PIN can only contain numbers and must be between 4 and 6 numbers.
dumbpasswordrules.com
September 24, 2026 at 7:47 AM
This dumb password rule is from Tangerine.
Your PIN can only contain numbers and must be between 4 and 6 numbers.
https://dumbpasswordrules.com/sites/tangerine/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Your PIN can only contain numbers and must be between 4 and 6 numbers.
https://dumbpasswordrules.com/sites/tangerine/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
This dumb password rule is from Sephora.
Password must be between 6 and 12 characters. No other rules
specified.
https://dumbpasswordrules.com/sites/sephora/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Password must be between 6 and 12 characters. No other rules
specified.
https://dumbpasswordrules.com/sites/sephora/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Sephora - Dumb Password Rules
Password must be between 6 and 12 characters. No other rules
specified.
dumbpasswordrules.com
September 29, 2025 at 2:43 PM
This dumb password rule is from Sephora.
Password must be between 6 and 12 characters. No other rules
specified.
https://dumbpasswordrules.com/sites/sephora/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Password must be between 6 and 12 characters. No other rules
specified.
https://dumbpasswordrules.com/sites/sephora/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
This dumb password rule is from Discovery Benefits.
Requires at least one symbol, but must be one of `! @ # $ % & * ?`, and also
has an unstated max length of 20 characters.
https://dumbpasswordrules.com/sites/discovery-benefits/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Requires at least one symbol, but must be one of `! @ # $ % & * ?`, and also
has an unstated max length of 20 characters.
https://dumbpasswordrules.com/sites/discovery-benefits/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Discovery Benefits - Dumb Password Rules
Requires at least one symbol, but must be one of `! @ # $ % & * ?`, and also
has an unstated max length of 20 characters.
dumbpasswordrules.com
September 25, 2026 at 8:09 AM
This dumb password rule is from Discovery Benefits.
Requires at least one symbol, but must be one of `! @ # $ % & * ?`, and also
has an unstated max length of 20 characters.
https://dumbpasswordrules.com/sites/discovery-benefits/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Requires at least one symbol, but must be one of `! @ # $ % & * ?`, and also
has an unstated max length of 20 characters.
https://dumbpasswordrules.com/sites/discovery-benefits/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
This dumb password rule is from Taco Bell.
Password may include special characters, except for #.
https://dumbpasswordrules.com/sites/taco-bell/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Password may include special characters, except for #.
https://dumbpasswordrules.com/sites/taco-bell/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Taco Bell - Dumb Password Rules
Password may include special characters, except for #.
dumbpasswordrules.com
May 12, 2025 at 7:22 PM
This dumb password rule is from Taco Bell.
Password may include special characters, except for #.
https://dumbpasswordrules.com/sites/taco-bell/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Password may include special characters, except for #.
https://dumbpasswordrules.com/sites/taco-bell/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
This dumb password rule is from NBA Store.
- Password cannot be longer than 20 characters
https://dumbpasswordrules.com/sites/nba-store/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
- Password cannot be longer than 20 characters
https://dumbpasswordrules.com/sites/nba-store/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
NBA Store - Dumb Password Rules
- Password cannot be longer than 20 characters
dumbpasswordrules.com
June 26, 2025 at 3:09 AM
This dumb password rule is from NBA Store.
- Password cannot be longer than 20 characters
https://dumbpasswordrules.com/sites/nba-store/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
- Password cannot be longer than 20 characters
https://dumbpasswordrules.com/sites/nba-store/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
This dumb password rule is from Ticketmaster.de.
Your password length is limited between 8 and 32 characters.
https://dumbpasswordrules.com/sites/ticketmaster-de/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Your password length is limited between 8 and 32 characters.
https://dumbpasswordrules.com/sites/ticketmaster-de/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Ticketmaster.de - Dumb Password Rules
Your password length is limited between 8 and 32 characters.
dumbpasswordrules.com
August 16, 2026 at 3:29 AM
This dumb password rule is from Ticketmaster.de.
Your password length is limited between 8 and 32 characters.
https://dumbpasswordrules.com/sites/ticketmaster-de/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Your password length is limited between 8 and 32 characters.
https://dumbpasswordrules.com/sites/ticketmaster-de/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
This dumb password rule is from Rushmore Loan Management Services.
Hmmm.. why are they afraid of double and single quotes in my passwords?
https://dumbpasswordrules.com/sites/rushmore-loan-management-services/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Hmmm.. why are they afraid of double and single quotes in my passwords?
https://dumbpasswordrules.com/sites/rushmore-loan-management-services/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Rushmore Loan Management Services - Dumb Password Rules
Hmmm.. why are they afraid of double and single quotes in my passwords?
dumbpasswordrules.com
May 25, 2025 at 2:42 PM
This dumb password rule is from Rushmore Loan Management Services.
Hmmm.. why are they afraid of double and single quotes in my passwords?
https://dumbpasswordrules.com/sites/rushmore-loan-management-services/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Hmmm.. why are they afraid of double and single quotes in my passwords?
https://dumbpasswordrules.com/sites/rushmore-loan-management-services/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
This dumb password rule is from Bank Leumi (Israel).
- Password consists of 6 to 12 characters
- Password contains only english letters and numbers without spaces.
https://dumbpasswordrules.com/sites/bank-leumi-israel/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
- Password consists of 6 to 12 characters
- Password contains only english letters and numbers without spaces.
https://dumbpasswordrules.com/sites/bank-leumi-israel/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Bank Leumi (Israel) - Dumb Password Rules
- Password consists of 6 to 12 characters
- Password contains only english letters and numbers without spaces.
dumbpasswordrules.com
September 7, 2025 at 2:40 PM
This dumb password rule is from Bank Leumi (Israel).
- Password consists of 6 to 12 characters
- Password contains only english letters and numbers without spaces.
https://dumbpasswordrules.com/sites/bank-leumi-israel/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
- Password consists of 6 to 12 characters
- Password contains only english letters and numbers without spaces.
https://dumbpasswordrules.com/sites/bank-leumi-israel/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
This dumb password rule is from Electronic Arts (EA).
Your password must be 8 - 16 characters, and include at least one lowercase letter, one uppercase letter, and a number.
https://dumbpasswordrules.com/sites/electronic-arts-ea/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Your password must be 8 - 16 characters, and include at least one lowercase letter, one uppercase letter, and a number.
https://dumbpasswordrules.com/sites/electronic-arts-ea/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Electronic Arts (EA) - Dumb Password Rules
Your password must be 8 - 16 characters, and include at least one lowercase letter, one uppercase letter, and a number.
dumbpasswordrules.com
October 28, 2025 at 3:00 AM
This dumb password rule is from Electronic Arts (EA).
Your password must be 8 - 16 characters, and include at least one lowercase letter, one uppercase letter, and a number.
https://dumbpasswordrules.com/sites/electronic-arts-ea/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Your password must be 8 - 16 characters, and include at least one lowercase letter, one uppercase letter, and a number.
https://dumbpasswordrules.com/sites/electronic-arts-ea/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
This dumb password rule is from GoDaddy.
Some characters are **too** special.
https://dumbpasswordrules.com/sites/godaddy/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Some characters are **too** special.
https://dumbpasswordrules.com/sites/godaddy/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
GoDaddy - Dumb Password Rules
Some characters are **too** special.
dumbpasswordrules.com
October 15, 2025 at 3:00 AM
This dumb password rule is from GoDaddy.
Some characters are **too** special.
https://dumbpasswordrules.com/sites/godaddy/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Some characters are **too** special.
https://dumbpasswordrules.com/sites/godaddy/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
This dumb password rule is from Intel.
https://dumbpasswordrules.com/sites/intel/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
https://dumbpasswordrules.com/sites/intel/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Intel - Dumb Password Rules
A compilation of sites with dumb password rules.
dumbpasswordrules.com
February 22, 2026 at 3:30 AM
This dumb password rule is from Intel.
https://dumbpasswordrules.com/sites/intel/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
https://dumbpasswordrules.com/sites/intel/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
This dumb password rule is from Air Miles.
- Exactly 4 numbers.
https://dumbpasswordrules.com/sites/air-miles/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
- Exactly 4 numbers.
https://dumbpasswordrules.com/sites/air-miles/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Air Miles - Dumb Password Rules
- Exactly 4 numbers.
dumbpasswordrules.com
January 19, 2026 at 3:17 AM
This dumb password rule is from Air Miles.
- Exactly 4 numbers.
https://dumbpasswordrules.com/sites/air-miles/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
- Exactly 4 numbers.
https://dumbpasswordrules.com/sites/air-miles/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
This dumb password rule is from IHG.
4, yes 4, digits only.
https://dumbpasswordrules.com/sites/ihg/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
4, yes 4, digits only.
https://dumbpasswordrules.com/sites/ihg/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
IHG - Dumb Password Rules
4, yes 4, digits only.
dumbpasswordrules.com
August 17, 2025 at 3:13 AM
This dumb password rule is from IHG.
4, yes 4, digits only.
https://dumbpasswordrules.com/sites/ihg/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
4, yes 4, digits only.
https://dumbpasswordrules.com/sites/ihg/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
This dumb password rule is from American Airlines.
- Between 6 and 16 characters
https://dumbpasswordrules.com/sites/american-airlines/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
- Between 6 and 16 characters
https://dumbpasswordrules.com/sites/american-airlines/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
American Airlines - Dumb Password Rules
- Between 6 and 16 characters
dumbpasswordrules.com
March 4, 2026 at 3:27 AM
This dumb password rule is from American Airlines.
- Between 6 and 16 characters
https://dumbpasswordrules.com/sites/american-airlines/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
- Between 6 and 16 characters
https://dumbpasswordrules.com/sites/american-airlines/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
This dumb password rule is from NordVPN.
- Password cannot be longer than 48 characters.
https://dumbpasswordrules.com/sites/nordvpn/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
- Password cannot be longer than 48 characters.
https://dumbpasswordrules.com/sites/nordvpn/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
NordVPN - Dumb Password Rules
- Password cannot be longer than 48 characters.
dumbpasswordrules.com
September 10, 2025 at 2:42 PM
This dumb password rule is from NordVPN.
- Password cannot be longer than 48 characters.
https://dumbpasswordrules.com/sites/nordvpn/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
- Password cannot be longer than 48 characters.
https://dumbpasswordrules.com/sites/nordvpn/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
This dumb password rule is from Sharekhan.
- At least 8 characters.
- At most 12 characters.
https://dumbpasswordrules.com/sites/sharekhan/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
- At least 8 characters.
- At most 12 characters.
https://dumbpasswordrules.com/sites/sharekhan/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Sharekhan - Dumb Password Rules
- At least 8 characters.
- At most 12 characters.
dumbpasswordrules.com
July 6, 2025 at 2:42 PM
This dumb password rule is from Sharekhan.
- At least 8 characters.
- At most 12 characters.
https://dumbpasswordrules.com/sites/sharekhan/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
- At least 8 characters.
- At most 12 characters.
https://dumbpasswordrules.com/sites/sharekhan/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
This dumb password rule is from Bloomingdale's.
16 characters maximum, no `.` `,` `-` `|` `/` `=` or `_` allowed.
https://dumbpasswordrules.com/sites/bloomingdales/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
16 characters maximum, no `.` `,` `-` `|` `/` `=` or `_` allowed.
https://dumbpasswordrules.com/sites/bloomingdales/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Bloomingdale's - Dumb Password Rules
16 characters maximum, no `.` `,` `-` `|` `/` `=` or `_` allowed.
dumbpasswordrules.com
November 3, 2025 at 2:43 PM
This dumb password rule is from Bloomingdale's.
16 characters maximum, no `.` `,` `-` `|` `/` `=` or `_` allowed.
https://dumbpasswordrules.com/sites/bloomingdales/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
16 characters maximum, no `.` `,` `-` `|` `/` `=` or `_` allowed.
https://dumbpasswordrules.com/sites/bloomingdales/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
This dumb password rule is from Entwickler.de.
Your password must be 12-20 characters.
https://dumbpasswordrules.com/sites/entwickler-de/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Your password must be 12-20 characters.
https://dumbpasswordrules.com/sites/entwickler-de/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Entwickler.de - Dumb Password Rules
Your password must be 12-20 characters.
dumbpasswordrules.com
September 20, 2025 at 2:40 PM
This dumb password rule is from Entwickler.de.
Your password must be 12-20 characters.
https://dumbpasswordrules.com/sites/entwickler-de/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Your password must be 12-20 characters.
https://dumbpasswordrules.com/sites/entwickler-de/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
This dumb password rule is from Williams-Sonoma.
25 maximum characters and disallowing some specials.
https://dumbpasswordrules.com/sites/williams-sonoma/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
25 maximum characters and disallowing some specials.
https://dumbpasswordrules.com/sites/williams-sonoma/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Williams-Sonoma - Dumb Password Rules
25 maximum characters and disallowing some specials.
dumbpasswordrules.com
June 27, 2025 at 2:43 PM
This dumb password rule is from Williams-Sonoma.
25 maximum characters and disallowing some specials.
https://dumbpasswordrules.com/sites/williams-sonoma/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
25 maximum characters and disallowing some specials.
https://dumbpasswordrules.com/sites/williams-sonoma/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
This dumb password rule is from Testprep Training.
The max password size is 20 characters
https://dumbpasswordrules.com/sites/testprep-training/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
The max password size is 20 characters
https://dumbpasswordrules.com/sites/testprep-training/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Testprep Training - Dumb Password Rules
The max password size is 20 characters
dumbpasswordrules.com
December 25, 2025 at 2:43 PM
This dumb password rule is from Testprep Training.
The max password size is 20 characters
https://dumbpasswordrules.com/sites/testprep-training/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
The max password size is 20 characters
https://dumbpasswordrules.com/sites/testprep-training/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
This dumb password rule is from CGHS.
Can't use any special characters except @ $ # ? _ * &
https://dumbpasswordrules.com/sites/cghs/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Can't use any special characters except @ $ # ? _ * &
https://dumbpasswordrules.com/sites/cghs/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
CGHS - Dumb Password Rules
Can't use any special characters except @ $ # ? _ * &
dumbpasswordrules.com
June 7, 2025 at 3:05 AM
This dumb password rule is from CGHS.
Can't use any special characters except @ $ # ? _ * &
https://dumbpasswordrules.com/sites/cghs/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Can't use any special characters except @ $ # ? _ * &
https://dumbpasswordrules.com/sites/cghs/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
This dumb password rule is from WellStar MyChart.
Your password must be between 8 and 20 characters.
https://dumbpasswordrules.com/sites/wellstar-mychart/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Your password must be between 8 and 20 characters.
https://dumbpasswordrules.com/sites/wellstar-mychart/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
WellStar MyChart - Dumb Password Rules
Your password must be between 8 and 20 characters.
dumbpasswordrules.com
May 6, 2026 at 3:56 AM
This dumb password rule is from WellStar MyChart.
Your password must be between 8 and 20 characters.
https://dumbpasswordrules.com/sites/wellstar-mychart/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Your password must be between 8 and 20 characters.
https://dumbpasswordrules.com/sites/wellstar-mychart/
#password #passwords #infosec #cybersecurity #dumbpasswordrules