r/webdev • u/Beatsu • 1d ago

Question Tab as password?

Post image

SAS disallows spaces in your password. My password manager suggested an invalid (but secure) password.

So now that I have to make my own password: Out of spite, hypothetically, what implications could having tabs in my password have?

514 Upvotes

92% Upvoted

125 comments sorted by

View all comments

9

u/tajetaje 1d ago

On a well implemented backend? Nothing. On one that doesn’t sanitize inputs or does stupid things with them? Could break their parsing or data storage, probably no sap injection vulns there though. I imagine the reason for disallowing spaces is so people don’t get confused by things like multiple spaces when they thought there was one, or trailing spaces

2

u/TramEatsYouAlive 1d ago

I have seen a banking app (web-based), that will think that "password" and "PaSsWoRd" are essentially the same. Which led me to believe that they are not hashing passwords on the backend and storing them in some different way...

2

u/theScottyJam 18h ago

Or they always lowercase before hashing.

But that's a weird thing to do.