This dumb password rule is from Southwest.

Password must be between 8 and 16 characters in length and include at least one uppercase letter
and one number. Certain special characters are also allowed, but the first character of the password must be alphanumeric.

https://dumbpasswordrules.com/sites/southwest/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

👀 😅🤣

https://thehackernews.com/2026/11/claude-codes-dont-ask-again-file.html

#Cybersecurity #llm #privacy #vibes

This dumb password rule is from Inria.

This is the account for those who work at [Inria](https://www.inria.fr/)
"the French national research institute for
the digital sciences".

You have to wonder what's wrong with these special characters but not
the other ones.
- Password expiration once a year
- Your password must contain at leas...

https://dumbpasswordrules.com/sites/inria/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

#OpenSSH flaw lets attackers log into password-disabled #Linux accounts

https://www.bleepingcomputer.com/news/security/openssh-flaw-lets-attackers-log-into-password-disabled-linux-accounts/

#sshole #SSH #cybersecurity

This dumb password rule is from Ancestry.

Password:
- Must be at least 8 characters long
- Must contain at least 1 number
- Must contain at least 1 letter or special character
- Must not be a well known or common password

https://dumbpasswordrules.com/sites/ancestry/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Eufy.

Eufy caps new passwords at 20 characters and restricts special characters to a fixed
allowlist (`!*@#$%^&*()_-|[0]/?.,>`), on top of requiring uppercase, lowercase, and
numbers. A hard upper bound well under any real hashing algorithm's actual limit is a
classic sign of dubious password handling ...

https://dumbpasswordrules.com/sites/eufy/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

🚀 Defguard 2.2 Hardware Key (FIDO2) MFA

🆕 What's new:
- FIDO2 hardware keys as WireGuard® MFA factor
- Multi-step MFA flows per location
- Redesigned mobile client
- MFA setup in the desktop client
- Firewall bulk actions

👉 https://defguard.net/releases/2.2.0/features/

#vpn #sysadmin #devops #selfhosted #SelfHosting #wireguard #OpenSource #release #security #privacy #homeLab #anonymity #floss #docker #CyberSecurity #InfoSec #OnlinePrivacy #DataProtection #InternetSecurity #NetworkSecurity

Alt...

Defguard 2.2 Release - Enterprise VPN on WireGuard with built-in FIDO2 hardware key MFA

This dumb password rule is from NBank.

User ID *has to* contain special characters, password *may not* contain (basically) any special characters.

https://dumbpasswordrules.com/sites/nbank/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Stuttgart Media University.

Your password has to be between 10 and 14 characters.
Also, you need to have at least one number, one uppercase letter and one lowercase letter.
And at least one of these special characters: ```!.,;+-=#$()[]{}&*```.
But don't use any of these special characters: ```<>|§@€?:%^\"'`°~```.
And don't...

https://dumbpasswordrules.com/sites/stuttgart-media-university/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Epic Games.

You must:
- Not use any of your last 5 passwords
- Use at least 7 characters
- Use at least 1 letter
- Use at least 1 number
- Not use spaces

Max password length's 256 characters.

https://dumbpasswordrules.com/sites/epic-games/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

🤓 Our @privacysafe team has done it again and offers a FREE #cybersecurity tool for fixing a major vulnerability on #Ubuntu and #Debian GNU / #Linux. Support our effort! https://privacysafe.app/docs/security-patches/apt/

Alt...

APT CVE

This dumb password rule is from Itaú Bank.

I know, it's in spanish, let me translate this monstrosity for you.

- Allowed characters: letters A to Z uppercase or lowercase (ñ is not allowed), number 0 to 9, #, $, %, &, +, -, . :, ;, _.
- You must use 8 characters.
- The password must contain at least one letter and at least one number.
- ...

https://dumbpasswordrules.com/sites/itau-bank/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Discovery Benefits.

Requires at least one symbol, but must be one of `! @ # $ % & * ?`, and also
has an unstated max length of 20 characters.

https://dumbpasswordrules.com/sites/discovery-benefits/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Air France.

- Between 8 to 12 characters
- Should contain capital, lowercase letters and numbers

https://dumbpasswordrules.com/sites/air-france/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Aetna Health Insurance.

- Password cannot be longer than 20 characters
- Password cannot have spaces and more 2 characters repeated in a row
- Password cannot have user's first name, last name or username

https://dumbpasswordrules.com/sites/aetna-health-insurance/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from BDO.

Please nominate a password which contains UPPERCASE, lowercase, numbers and symbols.
Password should not be the same as the user ID.
Avoid using consecutive characters such (ex. abc, DEF, 678) and invalid characters such as [!#$%^&';"].

https://dumbpasswordrules.com/sites/bdo/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

Cyberattack on fridges hits supermarkets across Europe

Four supermarket chains have reported an IT incident that spiked fridge and freezer temperatures overnight, with one company claiming it was a cyberattack.

https://www.abc.net.au/news/2026-11-03/european-grocers-report-fridge-cyber-incidents/107338760

#CyberSecurity

This dumb password rule is from Best Buy.

You can enter whatever password you like! But you probably don't want to
make it too long, because you'll break us and you'll never be able to
login again.

https://dumbpasswordrules.com/sites/best-buy/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Slovenska sporitelna.

Slovenska sporitelna is the biggest bank in Slovakia. Despite pretty new version of the internet banking (rolled out in 2018), their password policy restricts password to be 16 characters long at most and prohibits any special characters.

https://dumbpasswordrules.com/sites/slovenska-sporitelna/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Red Hat.

Symbols. You keep using that word. I don't think it means what you think
it means.

https://dumbpasswordrules.com/sites/red-hat/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

#Proton’s CEO Cancels #AI ‘Re-Interviews’

https://www.404media.co/protons-ceo-cancels-ai-re-interviews/

#privacy #cybersecurity #FOSS

This dumb password rule is from AirAsia.

- Between 8 and 16 characters
- Must contain a number, a lowercase letter, and an uppercase letter
- Special characters allowed, but not periods, commas, tildes, or angle brackets

https://dumbpasswordrules.com/sites/airasia/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

PS for @protonprivacy, Are you listening? Your customers are bailing. Lose Andy Yen ASAP.

#AskFedi #cybersecurity

So here’s the thing. My entire life is on Proton: email, calendar, documents, VPN, all my passwords, all my ID, all my important data.

My annual subscription is up at the end of January.

If they don’t oust Andy Yen by then, I’m out. The question is where?

Infomaniak seems to offer most of what Proton does but they also use AI.

What other options are there? I’m seeing people suggesting email alternatives. But I need a whole lot more than that.

#AskFedi #cybersecurity

This dumb password rule is from Air Miles.

- Exactly 4 numbers.

https://dumbpasswordrules.com/sites/air-miles/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Apple.

Can't contain 3 or more consecutive identical characters, nor can it be more than 63 characters long.

https://dumbpasswordrules.com/sites/apple/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Banco Nacional (Costa Rica National Bank).

Between 8 and 16 characters.

Must have 4 numbers and 4 letters.

Must not contain same letter or number in consecutive order.

Can't contain vowel letters neither the letter Ñ.

Password can't be the same as the previous 6 used.

https://dumbpasswordrules.com/sites/banco-nacional-costa-rica-national-bank/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Aetna Health Insurance.

- Password cannot be longer than 20 characters
- Password cannot have spaces and more 2 characters repeated in a row
- Password cannot have user's first name, last name or username

https://dumbpasswordrules.com/sites/aetna-health-insurance/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from SecureAccess Washington.

Central authentication for all Washington State services
(DoL, ESD, etc).

Password must have *exactly* 10 characters, but form happily
lets you enter more and only throws errors after submit,
providing no useful feedback.

https://dumbpasswordrules.com/sites/secureaccess-washington/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Whitcoulls.

Your password must:
- be between 7 and 15 characters
- contain a capital letter
- have no spaces (shown only when you go to change it)

https://dumbpasswordrules.com/sites/whitcoulls/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Telekom.

At first glance, their policy looks good - sure, the upper limit was chosen without necessity
and they enforce characters from all four groups, but your password manager will most likely come up with something suitable.

The website even tells you how 'wunderbar' your new password is - only to t...

https://dumbpasswordrules.com/sites/telekom/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Microsoft (e company store).

Max of 16 character oh and please don't use any characters we don'y know how to escape properly
also if it starts with ? you may break our wonderful website. What out with your password generator
duplicated characters is far too insecure to allow here.

https://dumbpasswordrules.com/sites/microsoft-e-company-store/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Daybreak Games.

Max password length is 15 characters

The only special characters that can be used are !"#$%

https://dumbpasswordrules.com/sites/daybreak-games/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from FCC.

The password cannot exceed 15 characters in length. The FCC regulates the
internet but apparently didn't get the memo on password security.

https://dumbpasswordrules.com/sites/fcc/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

EFF warns that “AdFection” shows how targeted ads can deliver zero-click spyware—putting journalists at risk without a click. The article explains the ad-tech threat and ways to reduce exposure. 🛡️📱 #Cybersecurity #Privacy https://www.eff.org/deeplinks/2026/10/lessons-learned-adfection

This dumb password rule is from Sears.

"cAsE sensitive, no spaces, ! or ?
8 characters min - 1 letter, 1 number
Can't repeat same character more than 3 times in a row
Cannot be or contain your username or email address"

https://dumbpasswordrules.com/sites/sears/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Deloitte GlobalAdvantage.

Rules that are completely arbitrary that basically make all safe passwords wrong,
instead forcing pseudo-safe password combinations.

https://dumbpasswordrules.com/sites/deloitte-globaladvantage/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

Canadians Are Running Out Of Time To Oppose The Dangerous #C22 #Surveillance Bill

https://www.eff.org/deeplinks/2026/10/canadians-are-running-out-time-oppose-dangerous-c-22-surveillance-bill

#Canada #privacy #BillC22 #cybersecurity #politics

#Switch2 security takes a hit as hackers unlock #homebrew access

https://arstechnica.com/gaming/2026/10/switch-2-jailbreak-gives-hackers-new-ways-to-run-homebrew-and-mod-games/

#Switch #Nintnedo #gaming #cybersecurity #AI

This dumb password rule is from Testprep Training.

The max password size is 20 characters

https://dumbpasswordrules.com/sites/testprep-training/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Mes Services Étudiant.

At least 6 characters, one uppercase letter, one lowercase letter, one digit
and one "special character".

These do not count as "special characters": `` + - = | @ " ' # ( ) [ ] { } < > / \ ` ;``.

https://dumbpasswordrules.com/sites/mes-services-etudiant/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Minnesota Unemployment Insurance.

Locked to *exactly* 6 chars, alphanumeric only, not special chars.

https://dumbpasswordrules.com/sites/minnesota-unemployment-insurance/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from PagoMisCuentas.

Password must be between 8 and 15 alphanumeric characters, and have
at least one uppercase and one lowercase letter.

https://dumbpasswordrules.com/sites/pagomiscuentas/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

💼 Join the weekly Product Deep Dive for Business Admins on Oct. 28th to learn how to bring Bitwarden to work:

https://bitwarden.com/events/weekly-demo/

#Bitwarden #ITadmin #cybersecurity