Update - Friday, August 24, 2012 Maintenance Update
|
New update: 100 character password length
Bristlebane
Quote:
spun ducky
I will most certainly be switching to a much longer password to make bruteforce attacks completely pointless.
akelarumi
hmmmm, maybe, but there was an amount of people saying the current limit (I think it was 16??)was too short. So I think now everyone has enough characters as they feel needed to protect themselfs.
cosyfiep
100 characters...hope that includes symbols and not just alpha numeric like the old ncsoft system was---
Blu_Haze
At first I read that wrong. On first glance I thought it said that they changed the minimum password length to 100 characters.
Nearly fell out of my chair.
Nearly fell out of my chair.
Da Kenster
As a side note, some further information regarding the change:
If your current password is 15 or fewer characters, you will see no change. However, if you’re currently typing a password that is longer than 15 characters, you will receive an “incorrect password” error message when entering it. The reason for this error is that, until now, Guild Wars has allowed players to enter more than 15 characters in the password field, but only verified the first 15 characters during log-in. Therefore, to access your account after today’s update, you will need to enter no more than the first 15 characters of your existing password. Once logged in, you can opt to change your password, creating one that is up to 100 characters.
If your current password is 15 or fewer characters, you will see no change. However, if you’re currently typing a password that is longer than 15 characters, you will receive an “incorrect password” error message when entering it. The reason for this error is that, until now, Guild Wars has allowed players to enter more than 15 characters in the password field, but only verified the first 15 characters during log-in. Therefore, to access your account after today’s update, you will need to enter no more than the first 15 characters of your existing password. Once logged in, you can opt to change your password, creating one that is up to 100 characters.
projectmercy
I'm appreciative of this change. Thanks anet for upping the value. I may not get up to 100, but 15 was far too low for me.
kalian
jazilla
supercalifragilisticexpialadocius?
keithmcm
how many words in the gettysburg address?
HigherMinion
the recommendation is to make a silly string of numbers/letters/caps and symbol and save to a notepad and encrypt. copypaste each time.
gj you wont get hacked.
gj you wont get hacked.
Zenzai
MondayTuesdayWednesdayThursdayFridaySaturdaySunday .
Seriously though, 100 characters? How many people would remember that?
Seriously though, 100 characters? How many people would remember that?
Shalazar
This allows you to use pass-phrases instead of just plain passwords.
Mintha Syl
Same same <.< I was already thinking on how to make something like that and even remember it. Unless you make something like a real sentence but then is easily hackable.
Fay Vert
"I have a password that is hard for anyone to brute force attack but is still easy for me to remember"
100 chars
100 chars

Bristlebane
Fay.. don't forget to change your password now that everyone know's it
hehehehe
hehehehe
Kunder
There was already protection against brute forcing before, and 16 characters was more than enough to protect you into the far forseeable future. The only change is now when you get keylogged they keylogger will need to report up to a 100 character password.
Main way to prevent account problems is to not use the same password multiple times, not to get a keylogger, and ignore people emailing you saying they are Anet support. This won't change that one bit.
Main way to prevent account problems is to not use the same password multiple times, not to get a keylogger, and ignore people emailing you saying they are Anet support. This won't change that one bit.
makosi
Steamguard is still superior, is it not? Why can't NCSoft or Anet or whoever implement something like that?
Sorceress Star
Since I have a keyword generator, I tried changing mine from (what I thought was 16, but actually 15) to 100. Did it very carefully, with copy and paste.
Fail. even tried only 15 of the new one, and backed it off to 99. Still fail.
Reset password back to new 15 and it works fine now.
Your mileage may vary, but beware.
Fail. even tried only 15 of the new one, and backed it off to 99. Still fail.
Reset password back to new 15 and it works fine now.
Your mileage may vary, but beware.
ScoutMATH
md5 hashes of 3 strings = 90~ characters
Snograt
Twasbrilligandtheslythytovesdidgyreandgimbalinthew abeallmimsyweretheborogrovesandthemomerathsoutgrab e
Easy and memorable. The forum made the gaps, not me
Easy and memorable. The forum made the gaps, not me

akelarumi
NOOOOOOOO now I can't play GuildWars anymore. I have hippopotomonstrosesquipedaliophobia (also known as fear of long words).......
Renowned Spartan
bhavv
Quote:
There was already protection against brute forcing before, and 16 characters was more than enough to protect you into the far forseeable future. The only change is now when you get keylogged they keylogger will need to report up to a 100 character password.
Main way to prevent account problems is to not use the same password multiple times, not to get a keylogger, and ignore people emailing you saying they are Anet support. This won't change that one bit. |
16 characters are no longer enough for me, IMHO you need a minimum password length of 25 characters nowadays to be secure enough, including upper and lower case, numbers, symbols and random strings.