QUICK NEWS

{NEW} - A new css video is up.

{OLD} - New video courtesy of Skhilled, Thanks for posting it up.

Video of the moment:


Internal Links

SMF Sites

Quick Info
Cookies help us provide you a better browsing experience. By using our site, you consent to the use of cookies by us.
OK Learn more

Maximum password length

Started by Neša, Dec 23, 2022, 08:16 PM

Previous topic - Next topic

0 Members and 3 Guests are viewing this topic.

Go Down Pages1

Neša

Dec 23, 2022, 08:16 PM Last Edit: Dec 23, 2022, 08:23 PM by Neša
Hi All,

I have created a clean test 2.0.19 forum I've used a password manager to generate a 100 character password.
The admin creation part worked fine and the user was created, when I try to login using the username/password combo it errors out saying my details are incorrect.

Is there a maximum character password limit in 2.0.19? I think the password might have been truncated before it was hashed and sent to the database.

Bigguy

#1
Dec 24, 2022, 08:38 AM
Quote from: Neša on Dec 23, 2022, 08:16 PMIs there a maximum character password limit in 2.0.19?
I have not heard of one but I would think there is yes. We'll see what others think though. I think there would have to be really.
"It's the American dream....cause ya have to be asleep to believe it." - George Carlin

Oldiesmann

#2
Dec 24, 2022, 01:54 PM
There shouldn't be, because passwords are hashed (encrypted) before they're sent to the database, so the information in the database will have the same length regardless of how long the actual password is.
Christian Metal Fans - https://www.christianmetal.fans

Bigguy

#3
Dec 24, 2022, 02:18 PM
Ok, that makes sense.
"It's the American dream....cause ya have to be asleep to believe it." - George Carlin

Skhilled

#4
Dec 24, 2022, 05:06 PM
Personally, I would've thought a length of 50 would be way to long! LMAO It damn sure would be hard to remember. LOL

Neša

#5
Dec 24, 2022, 06:36 PM Last Edit: Dec 24, 2022, 07:06 PM by Neša
Quote from: Oldiesmann on Dec 24, 2022, 01:54 PMThere shouldn't be, because passwords are hashed (encrypted) before they're sent to the database, so the information in the database will have the same length regardless of how long the actual password is.
Yep it stores a 64 character hashed password, it was just weird that it went through created the admin user then 10 seconds later I couldn't use the same password to login.

I have just re-created the error, I changed my 50 character password to 100 in my profile logged out then tried to log in again I get the password incorrect message.
Please don't try it on this forum the server can't send password reset emails so you'll be locked out.

Neša

#6
Dec 24, 2022, 06:37 PM Last Edit: Dec 24, 2022, 06:43 PM by Neša
Quote from: Skhilled on Dec 24, 2022, 05:06 PMPersonally, I would've thought a length of 50 would be way to long! LMAO It damn sure would be hard to remember. LOL
I have a password manager for that :)
Why not use very long passwords.

Skhilled

#7
Dec 24, 2022, 07:03 PM
I have one too. But if something goes wrong, you're screwed. LOL

I do store my important passwords elsewhere. ;)

Neša

#8
Dec 24, 2022, 07:05 PM
Quote from: Skhilled on Dec 24, 2022, 07:03 PMI have one too. But if something goes wrong, you're screwed. LOL

I do store my important passwords elsewhere. ;)
Yep, I have 6 current backups on 6 different devices so all 6 have to stop working for me to be in a bad position.

Go Up Pages1