I like to create long complex passwords, and 1Password is a great tool for that.
Every once in a while, I come across a website that lets me create an account with a password that WILL NOT WORK
with that website.
I just created an account at trulia.com, and used 1Password to generate this password: [font=courier new,courier,monospace]4&+2V3q[vq=Z3e[/font]
Trulia let me create my account which I saved in 1Password.
Then I logged out, and logged back in with 1Password to make sure it worked. (I always do this when creating a new account.) But it didn't work.
So I used Trulia's "Forgot password?" feature to reset it. I was able to log in with the password they sent me. Then I went to the "edit profile" screen to change my password. Again I entered 4&+2V3q[vq=Z3e as my password. It let me save that as my new password. Then I logged out, and manually tried to log back in. Again it rejected my password as invalid.
I reset my password again, and created a new password using only digits and upper & lowercase letters, but no symbols. This one works fine both manually, and with 1Password.
People who design websites like this have made at least two fundamental design errors:
- They allow users to enter invalid passwords when accounts are created, and also on their edit profile page (where passwords may be changed).
- They don't tell users about these restrictions. Nowhere does it say "symbols not allowed."