Avoid Arbitrary Length Restrictions in Generator

For the love of god PLEASE remove this restriction. The built in passphrase generator was one of my favorite features up until a few days ago when I noticed I wasn’t ALLOWED to make a password that would fit into a website’s max length.

Even putting aside the legitimate use-cases for a shorter password (i.e. most websites enforcing their own arbitrary MAX length limits on passwords, which is dumb in its own right), developers need to stop treating users like children and let them make their own decisions. This is wildly overreaching. If someone decides to make a one word password and gets hacked, that’s their problem. Bitwarden is not a security advisor, it’s a password manager. I see no reason to police users on this matter.

4 Likes