Ledger-live-desktop: Password Length > 20

Created on 9 Jul 2018  路  4Comments  路  Source: LedgerHQ/ledger-live-desktop

Ledger Live Version and Operating System

  • Ledger Live 1.0.0
  • Platform: linux

Expected behavior


Not that much a bug, but it seems that there is a 20 characters limit on the password length (since nothing appears on the screen if I type more).
So when I type more than 20 characters, should'nt I be warned?

Actual behavior


(At fist I though the (unseen) extra characters were taken into account for the password, but they are not. my bad!)
Still, I'd like to be warned about the password policy

Steps to reproduce the behavior

During the password creation, enter more than 20 characters,

Most helpful comment

let's just not limit the password. WDYT? @sanpedromanuel

All 4 comments

let's just not limit the password. WDYT? @sanpedromanuel

I am not aware about the discussions about the password usage, but I note two things:

  • it is not mandatory
  • there is no policy regarding Password Strength,

Which I understand, since it is only a problem of privacy for the user as I understand now.

So my Issue may not be very important :/

But a simple warning would have be enough for me :)

This is an especially dangerous practice because it truncates long passwords without telling you what the limit is. Which means you may never know what the app thinks your password is. I'm glad to see this issue being resolved by #958.

Was this page helpful?
0 / 5 - 0 ratings

Related issues

Urgo picture Urgo  路  3Comments

nicolasbigot picture nicolasbigot  路  3Comments

staticfrost picture staticfrost  路  4Comments

pollastri-pierre picture pollastri-pierre  路  5Comments

kravens picture kravens  路  3Comments