613
submitted 4 months ago* (last edited 4 months ago) by nokturne213@sopuli.xyz to c/privacy@lemmy.ml

Not only does the credit bureau max out their password length, you have a small list of available non-alphanumeric characters you can use, and no spaces. Also you cannot used a plused email address, and it had an issue with my self hosted email alias, forcing me to use my gmail address.

Both Experian and transunion had no password length limitations, nor did they require my username be my email address.

Update: I have been unable to log into my account for the last 3 days now. Every time I try I get a page saying to call customer service. After a total of 2 hours on hold I finally found the issue, you cannot connect to Equifax using a VPN. In addition there is no option for 2FA (not even email or sms) and they will hang up on you if you push the issue of their security being lax. Their reasoning for lax security and no vpn usage is "well all of our other customers are okay with this".

(page 2) 50 comments
sorted by: hot top controversial new old
[-] drwho@beehaw.org 9 points 4 months ago

Huh - they increased it!

[-] drukqs@hachyderm.io 8 points 4 months ago

@nokturne213 In Canada, we also have transunion; they officially say max pw size is 30 but it’s actually 15. Complete joke. At least Equifax has proper 2FA.

load more comments (2 replies)
[-] guemax@lemmy.today 6 points 4 months ago

At least they show you their requirements. Usually I use passwords with up to 150 characters (including special ones). Getting a vague response like "Password is invalid" is so annoying. I then have to remove special characters and reduce the length step by step until it is accepted by the website. (But 20 characters is way too short, resulting in these hilarious other requirements. You just want to create an account, without having to do a PhD in creating passwords first.)

load more comments (4 replies)
[-] StorageAware@lemmings.world 6 points 4 months ago

I always get a chuckle when financial institutions have requirements like these, or lack 2FA. My Lemmy account has more security at this point.

[-] AceFuzzLord@lemm.ee 6 points 4 months ago* (last edited 4 months ago)

The 20 character length limit is so annoying because I once had 2 distinct passwords (not in use anymore) that were both coincidentally 21 characters long. Character limiting me by a single character at the end of those old passwords was annoying because I usually ended up, for some services I needed, having to change up and use a completely new password. Back when I was a lot worse about reusing passwords than now.

[-] incompetentboob@lemmy.world 6 points 4 months ago

Reminds me of this

[-] doggle@lemmy.dbzer0.com 5 points 4 months ago

I've seen even shorter limits. Still annoying.

[-] HootinNHollerin@lemmy.world 4 points 4 months ago* (last edited 4 months ago)

I went through that bullshit so many times trying to get the characters etc then the next step said not available try again later, then repeat that a few times. What BS a max of 20 characters is too.

load more comments
view more: ‹ prev next ›
this post was submitted on 21 Aug 2024
613 points (98.1% liked)

Privacy

32517 readers
267 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS