Credit Club registration encourages weak passwords

infocom

The Credit Club registration does not allow copy and paste of the password. I really hate it when websites do this, it means you cannot use a hard to remember password, or use a password manager, which is recommended for security reasons.

So you end up entering an easy password, one you can easily type out and therefore remember.

I cant see who to contact for that site so posting it here.

I am not registering on it, because I wont be able to use a secure password, not until it has paste enabled on the password field.

https://clubs.moneysavingexpert.com/creditclub/

Willing2Learn

In addition to your password, you also need to input three characters from a memorable word to login.


I do agree though, that the password is a weak one as it does not allow symbols.

DCFC79

Or just enter a password and not it down somewhere, maybe a word doc and store it in a folder that needs a password to open the folder.

[Deleted User]

I use a well known password manager.

It generated a strong 20 or so character password for me, entered it in both fields and stored in the the password manager vault.

It also contains special characters/symbols

Nasqueron

infocom wrote: »

The Credit Club registration does not allow copy and paste of the password. I really hate it when websites do this, it means you cannot use a hard to remember password, or use a password manager, which is recommended for security reasons.

So you end up entering an easy password, one you can easily type out and therefore remember.

I cant see who to contact for that site so posting it here.

I am not registering on it, because I wont be able to use a secure password, not until it has paste enabled on the password field.

https://clubs.moneysavingexpert.com/creditclub/

What in pities name is wrong with you? Just have a difficult password and enter it twice? Are you somehow incapable of entering the same difficult password twice? Copy/paste blocking is good practice, it stops people entering a password with a typo (e.g. passwprd) twice and getting themselves locked out as the password they think it is, is wrong.

elleJay42

Nasqueron wrote: »

What in pities name is wrong with you? Just have a difficult password and enter it twice? Are you somehow incapable of entering the same difficult password twice? Copy/paste blocking is good practice, it stops people entering a password with a typo (e.g. passwprd) twice and getting themselves locked out as the password they think it is, is wrong.

It's not hard to remember one difficult password but I must have at least 35 different things I log in to regularly between work and personal. That's 35 different 'difficult' passwords I would have to remember.

Not allowing people to copy and paste from a password manager means people will re-use passwords and that's really unsafe, once one account is compromised all your accounts are

Nasqueron

elleJay42 wrote: »

It's not hard to remember one difficult password but I must have at least 35 different things I log in to regularly between work and personal. That's 35 different 'difficult' passwords I would have to remember.

Not allowing people to copy and paste from a password manager means people will re-use passwords and that's really unsafe, once one account is compromised all your accounts are

No it doesn't.


It just means you need to type it in, by blocking copy/paste it prevents you making a typo on each password and locking yourself out.


It literally takes maybe 10-20 seconds to type it rather than copy paste

jimbo26

Real world problems, just don't register if typing a password twice is too difficult for you, !!!!!!.

System

This is absurd. Literally moaning about having to type a password twice. (on the first time you register only). Get a grip.