While registering I noticed that the password form says the key can be between 8 an 20 characters, but here's where it gets interesting:
- You can create a password that's up to 30 characters long.
- (It can include special characters as long as there are no HTML characters.)
- A 30-character-long password works perfectly fine when signing in.
- You can't, however change your password if it's over 20 characters long, because the password change form accepts 20 characters max in the Current password field, but the form also accepts 30 characters in the new Password field. That's a big inconsistency.
Suggested solution:
Update the new password length prompt to suggest between 8 and 30 characters, make the Current password field accept 30 characters.
_
"Anarchy means the absence of a ruler, NOT the absence of rules" - Mark Passio
