Thread

<input type="password" maxlength="20"> prevents me from logging into Vanguard

66 points · 99 comments · tanin

bootlooped · 1790984162 · focus · HN ↗
My biggest question here is are they not just feeding the input into a hash function, why can't it be longer than 20 characters?
1. frenchtoast8 · 1790984309 · focus · HN ↗
  TFA says the mobile app works (so presumably the backend accepts long passwords fine). Looks like it's just a frontend issue. I wonder if deleting the maxlength attribute before submitting the form works fine?

Unofficial Hacker News client; not affiliated with Y Combinator.