DUduffn·Feb 15, 2023
I'm glad you enjoy it! If you have any sites you like to add, please feel free to contribute. https://github.com/duffn/dumb-password-rules/blob/main/CONTR...
In A compilation of websites with dumb password rulesduffn
dumb-password-rules
Nunjucks2016–2023
duffn / dumb-password-rules
dumb-password-rules
A compilation of sites with dumb password rules.
16Distinct people
21Mentions
0Explicit recommenders
3KGitHub stars
What to know before exploring
What it is
A compilation of sites with dumb password rules.
GitHub
Where it is used
No documented product use was verified in the last source check.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:56:07 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year21 dated mentions
Observed mentions: 2016-12-05 15:23:28 UTC to 2023-02-15 15:13:19 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2016 | 2016-01-01 00:00:00 UTC | 2017-01-01 00:00:00 UTC | 2 | 1 | 1 |
| 2017 | 2017-01-01 00:00:00 UTC | 2018-01-01 00:00:00 UTC | 2 | 0 | 2 |
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 8 | 2 | 6 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 2 | 1 | 1 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 4 | 0 | 4 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 2 | 0 | 2 |
What Hacker News says
21 sourcesGood idea! I've added an issue for discussion here: https://github.com/duffn/dumb-password-rules/issues/445
In A compilation of websites with dumb password rulesRelated (about password rules):
https://github.com/duffn/dumb-password-rules
In The Stupidest Validation RulesJust in case:
Dumb Password Rules
Shaming sites with dumb password rules.
https://github.com/duffn/dumb-password-rules
In Sending spammers to password purgatoryDumb Password Rules: Shaming sites with dumb password rules
37 points · Open discussion>I need to start a list of companies with dumb password rules
You were heard: https://github.com/duffn/dumb-password-rules
In I hate password rulesSure could be, but to play devils advocate maybe not, some hashing libraries have limits (silent truncation or otherwise) and/or it could be reasonable not to allow users to make the backend hash strings of unbounded length.
These specific limitations indicate that it's more likely to be something bad however, it's funny because I remember adding EasyJet to https://github.com/dumb-password-rules/dumb-password-rules/p... last year.
In EasyJet admits a cyber-attack has affected approximately nine million customersWhy do I need to connect with linked and log in again? Also why are the password rules so absurd? Inb4 [dumb-password-rules](https://github.com/dumb-password-rules/dumb-password-rules)
In Show HN: I built a website for sharing salary infoAsk HN: Website / GitHub for shaming websites that do not work in Firefox?
Is there a list similar to Dumb Password Rules[1], but for websites that do not work in Firefox? The idea is to publicly shame companies for not testing their software across common browsers.
Live example:
Open Firefox 69 on Windows 10 1803+.
Set the web browser width to 1250+ pixels.
Open https://www.lmcu.org
Click "Online Banking Login"
Observe the orange "Login" buttons are pushed down slightly.
[1]: https://github.com/dumb-password-rules/dumb-password-rules
25 points · Open discussionI would argue that this is not just banks but a number of different services. This entire Github repository [1] and this Twitter account [2] are dedicated to sites with dumb password rules. Passwords are not meant for humans.
Here is a link to a hackernews thread discussing the worst of the requirements in the repository is here [3].
[1] https://github.com/dumb-password-rules/dumb-password-rules
[2] https://twitter.com/dumb_pw_rules
[3] https://news.ycombinator.com/item?id=20890381
In Banks, Arbitrary Password Restrictions and Why They Don't MatterThe horizontal scrolling makes the quoted part pretty hard to read. If it's still editable, please consider changing that to simple `> ` based quoting.
Edit: Link to the github issue comment mentioned - https://github.com/dumb-password-rules/dumb-password-rules/i...
In Sites with dumb password rulesStrange to see a .gov.uk site on there ( https://github.com/dumb-password-rules/dumb-password-rules#h... ) as they have excellent guidance on this https://design-system.service.gov.uk/patterns/passwords/
In Sites with dumb password rulesShowing the 15 most recent of 21 sources. Enable JavaScript to search and browse every indexed mention.