Yhn ScienceSpace first seen 1 d ago, last 31 min ago, peak #5
Password field length limit blocks Vanguard logins
Original: <input type="password" maxlength="20"> prevents me from logging into Vanguard
An engineer has described how a password input field with a maxlength of 20 characters blocked him from logging into Vanguard, the US investment firm. Passwords longer than 20 characters are silently truncated, so a correct password fails. The write-up argues such input limits are harmful security practice and has struck a chord with developers discussing similar flaws elsewhere.
Why now: Developers are debating a common but overlooked web form bug with real security and usability consequences at a major financial institution.
Evidence
API: https://socialmediatrends-api.osmike.com/v1/trends/791343