Whenever I see a user onboarding flow which either
1. prohibits passwords over a certain length; or
2. prohibits passwords containing specific characters
I automatically assume that system is storing passwords in plaintext.
RyNo
“your password can be 8-12 characters” ok so u just hate security