When logging in, why is there no reminder like 'your password was at least 8 characters long with at least one digit'.

Because that would be VERY useful to brute force attackers.

Because, generally passwords are not stored as plaintext.

At least the site's stupid requirements for new passwords should be displayed. I had the following happen more than once:

1. Enter site, cannot remember password. Try a few, no match.
2. Submit password reset form, open confirmation link, try to set new password
3. „Your password must contain one capital letter, one special character, one arabic and one roman number, and be at least 7.8 characters long“
4. I remember what my old password was.

@7400 Yeah, I like those requirements a lot, especially if they don't fit my default password scheme and I have to create an uncommon password.

I have two accounts where only numbers are allowed, so it's more of a pin. It seems mainly banks and insurance companies fancy pins and avoid real passwords.

And there was one occasion where it said "At least 8 characters, including ...", after trying several passwords that matched the given requirements but all were rejected I found out that it had to be *exactly* 8 characters.

And there is this bank account where all people with access to one account log in with the same user-ID but different passwords. Don't know how someone can come up with such shit and how they handle it internally (maybe it's better to not know). And additionally the whole account is locked for all permitted users if one enters the wrong password 3 times.

I could continue this list all day long...

If a site does that... STOP USING IT! That meant they know what your password is. Which is very bad :/ All passwords nowdays should be hashed.

@7400 happened with me also!

@AlexDeLarge surely a joke but i guess everyone took it seriously! 😅

@BrainOnHorses you never know. There are actually people that say stuff like this...