529574 - Should notify of maximum password length on registration page

Status: RESOLVED WORKSFORME

(Bugzilla :: User Accounts, defect)

Description

[Scott Anderson]

User-Agent:       Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.15) Gecko/2009102815 Linux Mint/7 (Gloria) Firefox/3.0.14
Build Identifier: Bugzilla 3.4.3

The maximum accepted password length is 16 characters; by default I use 22. Instead of being taken to a page advising that the password chosen is too long (current behaviour), the maximum accepted password length should be advertised alongside the password entry box.

Reproducible: Always

Steps to Reproduce:
1. Follow sign up procedure
2. Attempt to enter password over 16 characters in length
3. Notice how you weren't told that this would not be accepted
Actual Results:  
The user is taken to a page informing them that the selected password is over 16 characters long and is obliged to hit back on their browser

Expected Results:  
The maximum length of the password should be advertised in the first place, or the number of characters allowed in the entry box limited to 16 (though this is risky for users that copy/paste their password)

Not very important, really, but a slight irritation.

Comment 1

[Reed Loden [:reed]]

The maximum password length has been removed in Bugzilla 3.6 (bug 471620), so this won't be an issue for much longer, thankfully.

Comment 2

[Frédéric Buclin]

This limitation existed forever, and you're the first one to complain (I guess 99.99% of users have passwords shorter than 16 characters by default). No need to fix this tiny problem on the stable branch. As reed said, this limitation is gone in Bugzilla 3.5.