Post Reply Password Validation Bug Report
17003 cr points
Send Message: Send PM GB Post
Offline
Posted 5/7/16
The password validation functions are different between the login screen (https://www.crunchyroll.com/login) and the password reset screen. This can lead to users accidentally locking themselves out of their accounts.

I think these are a set of steps to repro, but I'm not going to double check this since this isn't my job:
1) Request a password reset email
2) Click on the link in the email
3) Enter a new password that contains spaces in both fields and submit
4) Try to login at crunchyroll.com/login
5) You'll see "please use a valid password," and will be unable to submit the login form
6) Unless there's some other login form with different validation, now you have to go reset your password again
Der Zoodirektor
23405 cr points
Send Message: Send PM GB Post
34 / M / Germany
Offline
Posted 5/7/16
We don't allow spaces in the password, IIRC.
25008 cr points
Send Message: Send PM GB Post
Offline
Posted 5/7/16
That's really the strangest thing, I've had spaces in my password for the longest time and then today I just couldn't log in. I reset my password to what it should be and was still not able to get in. Now though, after resetting it to a password with no spaces, It's letting me in.

It definitely was having trouble with spaces too because before I reset it, I tried typing the password without spaces, thinking the system automatically took them out. It gave me the green checkmark when I hit login, but then came back with "incorrect logon information". STRANGE
48008 cr points
Send Message: Send PM GB Post
30 / M
Offline
Posted 5/7/16 , edited 5/7/16
I had a similar problem a few days ago. I have always used randomly generated 32 character passwords with special characters, and I never had any problems logging in with them. Then a few days ago, I tried logging in with the same password I've been using for several months and it said my password was invalid. I tried resetting my password with a new 32 character password with special characters, and got the same "invalid password" message when I tried logging in with it. So I had to reset my password again. This time I tried using 16 characters with no special characters, and the new password works fine.

Maybe crunchyroll changed the password requirements?
42905 cr points
Send Message: Send PM GB Post
M
Offline
Posted 5/7/16 , edited 5/7/16

DarthObsidian wrote:



Maybe crunchyroll changed the password requirements?


I just had the same error with a similar password. Reset using a new password with the same parameters and got the same error. finally got it to work with a weak password. If there are new password rules at least post them on the reset screen....

Edit: Just did some testing. The password field on the login screen seems to now be limited to 30 characters while the change password option in our profile allows at least 36 characters. Special character didn't seem to have an effect.
48008 cr points
Send Message: Send PM GB Post
30 / M
Offline
Posted 5/7/16 , edited 5/7/16

mlchanges wrote:


DarthObsidian wrote:



Maybe crunchyroll changed the password requirements?


I just had the same error with a similar password. Reset using a new password with the same parameters and got the same error. finally got it to work with a weak password. If there are new password rules at least post them on the reset screen....

Edit: Just did some testing. The password field on the login screen seems to now be limited to 30 characters while the change password option in our profile allows at least 36 characters. Special character didn't seem to have an effect.


You're right. I just tried to set a 30 character password with special characters and it worked. That feels more secure.

If they were going to change the character limit they should have announced it somewhere, unless it's a glitch of some kind.
Der Zoodirektor
23405 cr points
Send Message: Send PM GB Post
34 / M / Germany
Offline
Posted 5/8/16 , edited 5/10/16
I've forwarded the issue to the developers.
15044 cr points
Send Message: Send PM GB Post
M
Offline
Posted 5/8/16
Yeah, there is something really funky with it going on. Passwords had worked with spaces for over a year ( have records of my few passwords which all had spaces) up until now. If they no longer support spaces in the password, they really need to have a popup at the password reset explaining the current requirements...
10 cr points
Send Message: Send PM GB Post
Online
Posted 5/16/16
Thank you for the help, had the same problem,
Requesting password reset and removing spaces current in my password helped.

I'm a little sad that we cant use spaces in the passwords anymore.
You must be logged in to post.