duffn / dumb-password-rules

A compilation of sites with dumb password rules.
https://dumbpasswordrules.com
MIT License
2.99k stars 296 forks source link

University College London's Student Account Password Rules #193

Open AJFarmar opened 5 years ago

AJFarmar commented 5 years ago

This may not be reproducible but I have a screenshot:

UCL terrible password rules

Furthermore, your "username" is an email address, so considering that almost no address is less than 8 characters long, the rule that your username must not be contained in the password is completely useless.

These are, I'm reliably informed, the password rules for students coming into the university.

AJFarmar commented 5 years ago

Possibly a better image:

UCL Dumb Password Rules 2.0

duffn commented 5 years ago

Thanks for the issue. If you like, feel free to submit a PR.