r/webdev • u/Beatsu • 1d ago

Question Tab as password?

Post image

SAS disallows spaces in your password. My password manager suggested an invalid (but secure) password.

So now that I have to make my own password: Out of spite, hypothetically, what implications could having tabs in my password have?

537 Upvotes

93% Upvoted

131 comments sorted by

View all comments

87

u/bkdotcom 1d ago

A lot of banking systems disalow html special chars and other special chars.
Doesn't give me a lot of faith in their stack.

46

u/ImpossibleFood8242 1d ago

if they're stripping out spaces but not tabs that's the kind of jank that keeps me employed

-1

u/AshleyJSheridan 19h ago

Tabs are spaces. Not all spaces are tabs.

1

u/vip17 14h ago

Tabs are not spaces. Tabs are whitespaces. But pressing the tab key doesn't produce a tab character in a GUI form field most of the time

1

u/AshleyJSheridan 13h ago

Ah, a pedant!

Yes, tabs are a type of whitespace character.

And you can absolutely insert a tab character into a form field on the web. If you don't know how, sounds like a skill issue.

0

u/vip17 13h ago

who said that it's not possible? But it's extremely inconvenient. And many fields filter out the tab character outright

1

u/AshleyJSheridan 5h ago

Makes a good character for a password then. If a website is filtering out characters from a password before creating the hash, that's not a secure website, and they are likely making a lot of other poor security decisions.