Can somebody solve this puzzle?

It's fucking insane that an internet banking portal has such a low cap on max characters and such shitty rule enforcement.

It says one special character, not at least one. Maybe the password has more than one.

That programmer has obviously been playing https://neal.fun/password-game/

It says “one special character”. Not “at least one”.

oh. oh god. what the fuck.

If >1 special character is not allowed the last check should be failed . The second check is literally satisfied even if there are 2+ specials.

I'd not be using that bank.

Now imagine how many services just silently cut off your password at 8 characters and people never notice.

UltraVNC is very guilty of this.

the password game irl

Your Internet Banking Password should one special character (~!@#%^&*)

Great grammar on their part.

Maybe you accidentally did a permutation instead of a combination.

This was a new one for me:

Translation: Password strength: weak. Please don't use any special characters.

It was a generated 14 char password.. (╯°□°）╯︵ ┻━┻)

Noone should of aloud this code to go out the door. Atleast alot of other people people probably complained aswell, so your apart of a bigger group, incase you were worried.

My guess is they mean, one capital letter, one lower case letter, a number, and a special character

what's always amused me about these rules is that they exist because people are dumb. Technically, they lower the difficulty of the passwords slightly. ( for example, knowning that one character is a number reduces it to 10 options in stead of 10+26+26+whatever set of special characters)

anyhow. people should use password managers. just saying.

When commas and semicolons aren't allowed special characters

Please tell me someone didn't buy software with 'atleast' spelled like that in there. Please, tell me someone tested the web app and had the brains God gave a douglas fir and knew that wasn't a word; that it was never a word; that the writer's spell check should have picked that up; that it's not been over-ruled by stupid so much that it just takes it.

Well now. When we've been enforcing password requirements at work, we've had to enforce a bizarre combination of "you must have a certain level of complexity", but also, "you must be slightly vague about what the requirements actually are, because otherwise it lets an attacker tune a dictionary attack against you". Which just strikes me as a way to piss off our users, but security team say it's a requirement, therefore, it's a requirement, no arguing.

"One" special character is crazy; I'd have guessed that was a catch-all for the other strange password requirements:

• can't have the same character more than twice in a row
• can't be one of the ten-thousand most popular passwords (which is mostly a big list of swears in russian)
• all whitespace must be condensed into a single character before checking against the other rules

We've had customers' own security teams asking us if we can enforce "no right click" / "no autocomplete" to stop their users in-house doing such things; I've been trying to push back on that as a security misfeature, but you can't question the cult thinking.

If you have to try really hard to meet their password requirements, that’s how you know it’s super secure.

The USCIS site makes it clear that your CAN use emojis in your password.

ETA: but not required.

You are using a special character that is likely reserved internally

“Atleast”?

Since when is "atleast" a word?