Set up an account at Wells Fargo today and they told me the password requirements... This is a joke right?

>additional guidelines

Holy shit I just tested and they're not even case sensitive. Wut.

obligatory XKCD
https://xkcd.com/936/

They just gave me all of the requirements for my brute forcing tool. Seriously WF is a joke.

Someone should write a utility that takes a list of "password requirements" and outputs a bruteforce count and time estimate.

There might be some regulatory factor here. Like the 9-digit thing sounds like them trying to avoid people using their SSN as their password and this was the best they could come up with.

My favorite are the ones that prescribe an exact subset of acceptable special characters. Those are almost always smells that there’s an injection vulnerability behind it.

Should also require at least two emojis.

Password guidelines are crap.

Your challenge for the day is to write a regex string to match that. Including the clause regarding the three previous passwords

They have to make it so no one can break in and see all the fake accounts they set up 😂

@ancientyouth hahaha I was thinking the same!!