When password character limits attack

Internet

I registered for an OfficeWorks account recently. A risky move for an online Australian store, but I like to live on the wild side.

After entering my 64 characters of pseudo-random gibberish, I got this:

Correct the following before you can continue You cannot use the same character 4 or more times.

Sailor Moon were able to for four seasons, and heaven knows how many times Shonen Jump characters have been reused.

Still, it seems like a pretty arbitrary and silly restriction, especially when it will hash to the same size. If you have a very short password, or one that just utilises a single character, this would make sense. Otherwise, it doesn’t.

Author bio and support

Me!

Ruben Schade is a technical writer and IaaS engineer in Sydney, Australia who refers to himself in the third person in bios. Wait, not BIOS… my brain should be EFI by now.

The site is powered by Hugo, FreeBSD, and OpenZFS on OrionVM, everyone’s favourite cloud infrastructure provider.

You can leave me a comment by contacting me, and I might publish your thoughts. Please read the FAQs first though.

If you found this post helpful or entertaining, you can shout me a coffee or buy some silly merch. Thanks!