Windows 8 RP Still has Password Flaw?

By zeroomegazx
in The Fast Ring (Insider Previews)

 Share

Recommended Posts

Grand Master

BajiRav

Posted
Posted

I know the Consumer Preview of Windows 8 had a 16 Character password limit which limited me from linking my hotmail account with my Logon. It appears this is still the issue. Is this an actual limitation now or still a bug MS overlooked? Anyone else seeing this as well?

I'd hit that problem even before Windows 8. The Zune software has a similar limit and I had to reduce my password length to make it work.

I don't have that long password anymore to try it with RP. :/

Grand Master

Noir Angel

Posted
Posted

I know the Consumer Preview of Windows 8 had a 16 Character password limit which limited me from linking my hotmail account with my Logon. It appears this is still the issue. Is this an actual limitation now or still a bug MS overlooked? Anyone else seeing this as well?

Yep, I ran into this problem as well it wouldn't let me log back on until I changed my live password (and if your Windows 8 computer were to be your only Internet access the ramifications of this are potentially pretty serious)

Grand Master

Noir Angel

Posted
Posted

I think it's a limitation with Hotmail/Windows Live. I have a 20 character password but I can log-in just fine with only 16 characters.

It shouldn't be, I never had that problem with messenger or hotmail, Windows 8 was the first time it rejected my login due to the length of my password.

Enthusiast

zeroomegazx

Posted
  • Author
Posted

I think it's a limitation with Hotmail/Windows Live. I have a 20 character password but I can log-in just fine with only 16 characters.

Yeah I can't log into my hotmail accoutn with only 16 chars of my password (just tested) MS had better fix this or secure password users are going to be screwed. Of note it should also WARN you when you try to link if you type in MORE than a 16 char password.

Grand Master

Argi

Posted
Posted

Can you please clarify what the exact situation is? You can't create a Win8 account from a Microsoft Account when its password is longer than 16 characters? Or, only the first 16 characters of the password are checked when logging in via Windows 8 via MSFT Account?

I think it's a limitation with Hotmail/Windows Live. I have a 20 character password but I can log-in just fine with only 16 characters.

That might be the case. Seems as though there are a lot of mentions about it on the net.

Enthusiast

zeroomegazx

Posted
  • Author
Posted

Can you please clarify what the exact situation is? You can't create a Win8 account from a Microsoft Account when its password is longer than 16 characters? Or, only the first 16 characters of the password are checked when logging in via Windows 8 via MSFT Account?

That might be the case. Seems as though there are a lot of mentions about it on the net.

Issue:

When creating a Microsoft account and linking it with a LIVE or HOTMAIL account it lets you register said account with a password longer than 16 characters, however upon reboot when you go to enter in your password it only takes 16 characters max of your password thus not authenticating with LIVE and locking you out of your account on the computer.

This can also be seen if you create a LOCAL account and try to sign into the App Store with a LIVE or HOTMAIL account with a password longer than 16 characters.

*this was also present in the Consumer Preview.

Grand Master

Argi

Posted
Posted

Issue:

When creating a Microsoft account and linking it with a LIVE or HOTMAIL account it lets you register said account with a password longer than 16 characters, however upon reboot when you go to enter in your password it only takes 16 characters max of your password thus not authenticating with LIVE and locking you out of your account on the computer.

This can also be seen if you create a LOCAL account and try to sign into the App Store with a LIVE or HOTMAIL account with a password longer than 16 characters.

*this was also present in the Consumer Preview.

So the password field is capped at 16 characters or characters beyond that seem to be ignored? To be perfectly clear.

Enthusiast

zeroomegazx

Posted
  • Author
Posted

So the password field is capped at 16 characters or characters beyond that seem to be ignored? To be perfectly clear.

The password field allows more characters to be entered but it is only picking up the first 16, from what I have encountered anyways. I think that is why it was so hard to identify. Also I have repeated this on multiple computers and hotmail accounts.

It was an acknowledged but by MS, odd they didnt fix it.

Grand Master

Argi

Posted
Posted

The password field allows more characters to be entered but it is only picking up the first 16, from what I have encountered anyways. I think that is why it was so hard to identify. Also I have repeated this on multiple computers and hotmail accounts.

It was an acknowledged but by MS, odd they didnt fix it.

Hrm odd. I've never tried it but can Windows 7 handle passwords longer than 16 characters or has this been some limit that's been around for a while?

Enthusiast

zeroomegazx

Posted
  • Author
Posted

Hrm odd. I've never tried it but can Windows 7 handle passwords longer than 16 characters or has this been some limit that's been around for a while?

Windows 7 and Windows 8 Can handle passwords longer than 16 characters, it seems to be only a limit when linking to a MS account (live/hotmail)

Grand Master

Noir Angel

Posted
Posted

Can you please clarify what the exact situation is? You can't create a Win8 account from a Microsoft Account when its password is longer than 16 characters? Or, only the first 16 characters of the password are checked when logging in via Windows 8 via MSFT Account?

That might be the case. Seems as though there are a lot of mentions about it on the net.

You can create an account, and your first login will work, but after that if you log off or restart you'll be unable to log in again, it'll just keep giving you a "wrong password" message.

Mentor

+KibosJ Subscriber²

Posted
  • Subscriber²
Posted

Hrm odd. I've never tried it but can Windows 7 handle passwords longer than 16 characters or has this been some limit that's been around for a while?

Windows 7 can handle more than 16 characters, this is a Microsoft Account/Microsoft Live Limitation, it has been around for years and NEVER fixed.

Grand Master

Argi

Posted
Posted

Ah, I see now. http://support.micro....com/kb/2432933

Check your password length

Make sure that your Windows Live password length is no more than 16 characters. This current maximum limit is clearly indicated during the initial Windows Live sign up, but may not be clear during a password change. On a password change it's possible to enter more than 16 characters, but your account won't accept anything over 16 characters. You can change your Windows Live password by visitinghttps://account.live.com/ChangePassword.aspx.(You may have to sign in to your Windows Live account before you can access this webpage.)

This topic is now closed to further replies.
 Share
Go to topic listing

  • Posts

    • Segra 1.6.2

      By Copernic · Posted

      Segra 1.6.2 by Razvan Serea Segra is a free, open-source OBS-powered game recorder offering fast gameplay capture, instant clips, AI highlights, deep game integration, and seamless uploads—perfect for gamers, streamers, and content creators. Lightweight, fast, zero bloat. Segra key features: Automatic Game Recording: Begin capturing gameplay the moment your game launches, with zero manual setup. Instant Clipping: Save important moments instantly using a customizable hotkey—perfect for highlights, montages, or quick shares. Segra AI Highlights: Let Segra automatically detect kills, assists, deaths, and key events to generate polished highlight reels without manual editing. Gameplay Uploads: Upload recordings and clips directly to Segra.tv for fast sharing and cloud access. Deep Game Integration: Enjoy advanced game-data tracking across hundreds of supported titles, enabling smart highlight generation and stat-informed clipping. High-Performance Capture: Record up to 4K at 144 FPS using OBS-powered technology with minimal performance impact, supporting NVENC, AMD VCE, and custom quality controls. Segra Editor: Edit recordings easily with timeline controls, segment management, and event-based navigation to build the perfect clip. Customization Options: Adjust hotkeys, output formats, storage paths, codecs, capture quality, and performance settings for a tailored recording experience. Segra 1.6.2 changelog: UI: Improved the transition from the loading skeleton to the real content card. Security: Added Segra.dll code signing and automatic VirusTotal upload. Settings: Fixed the settings header to highlight Account when scrolled to the top. Recording: Updated OBSKit.NET to 1.4.1. Download: Segra 1.6.2 | 74.5 MB (Open Source) View: Segra Homepage | Github | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Hey Google, these are the Gemini features I want in 2026

      By Aditya Tiwari · Posted

      Hey Google, these are the Gemini features I want in 2026 by Aditya Tiwari Google Gemini has been around for over three years. The AI chatbot started its journey back in 2023 (as Bard) when ChatGPT was already a talk of the town. However, it quickly attracted criticism after misrepresenting facts about the James Webb Space Telescope. The search giant spent a year fine-tuning Bard before rebranding the chatbot and its underlying generative AI model to Gemini, drawing inspiration from NASA's first human spaceflight program. Note that Bard was initially powered by LaMDA and PaLM 2; Google has since added several new features and integrations to Gemini. That said, there is scope for improvement and a gap for new features. I have been using Gemini for a while now and have realized that the chatbot lacks several features, making it harder for me to research across topics. These are mostly function-over-form updates that can improve the overall experience. Delete individual messages from a conversation Image via DepositPhotos.com One good thing about Gemini is that it can maintain context throughout the conversation. But things might get chaotic when you want to ask a related question, but don't want it to be part of your conversation in the long run. You can't ask that related question in a fresh chat because Gemini will lose the active conversation context of what you're trying to research. If Google allowed you to delete individual question/answer pairs, you could simply ask about a sub-topic and remove it from the conversation to create a smooth flow of important stuff. Offline mode Image via DepositPhotos.com A big pain of using Gemini daily is that everything loads from the cloud. It takes time for your chats to appear, and you can't view your conversation history while offline. To get a better idea, you can open the Gemini app and see how it looks without an internet connection. While Gemini models run in the cloud, it wouldn't hurt if Google could store chats (at least the text part) on the device so we can refer to them when offline. Google can also offer a lightweight version of its AI model to help with basic drafting, summarization, and other tasks. It has the Gemini Nano model, which can perform on-device processing on Google Pixel, Samsung, and some other Android brands, but it's a system feature and not related to the cloud-based Gemini app. Make temporary chats permanent I can't thank Google enough for taking the time and effort to add incognito mode or temporary chat mode to the Gemini app. It lets you have conversations without worrying that the topics will end up in your chat history or used for model training (at least on paper). Google claims that it doesn't use your temporary chats to "personalize your Gemini experience or train Google’s AI models." However, the data is stored "up to 72 hours to respond to you and to process any feedback you choose to provide." That said, I often start researching something in a temporary chat, only to realize the chatbot's answer is good enough to refer to later. Sadly, Gemini doesn't have an option to make such temporary chats permanent. In other words, I won't be able to follow up on it if I close the temporary chat. I'm left with alternatives like copying the answers into notes or another app. My digital life will get a lot better if Gemini gets a button to make temporary chats permanent. Collapse answers for a cleaner view You're heavily invested in your research game and suddenly feel the need to go up in the chat to recall something. This is when the conversation thread starts to feel like an overwhelming, unending wall of questions and answers. What if Google added a way to collapse Q&A pairs in the Gemini chat thread? It would look quite clean and easy to navigate. You'll quickly get an overview of everything you have discussed with the chatbot. Add buttons to jump between messages Suggested mockup of the feature. This reminds me of a small but useful Gemini feature that Google could add to its chatbot: the ability to hop between prompts in a conversation. Just add simple up- and down-arrow buttons, similar to YouTube Shorts, so people can quickly scroll through the messages. A table of contents or Chat Overview It's hard to get a bird's-eye view of everything you have discussed with the chatbot during a lengthy conversation. This is where a table of contents, or Chat Overview, displayed at the top of the screen, possibly in a drop-down button, might come in handy. You'll be able to get an overview of the chat and jump between messages, serving as an alternative to the up/down arrow buttons. Temporary mode for Gemini Live Image: Google You can use Gemini Live to have real-time conversations with the chatbot, which feels like you're talking to someone in the same room. However, a downside is that Gemini Live doesn't work in Temporary Chat mode, so all your conversations end up in the chat history. Google should consider expanding the temporary chat mode to include Gemini Live. Default to a specific chat One thing that feels somewhat annoying to me is that Gemini always opens in a new chat, whether on web or mobile. Sometimes, you want to return to your last chat. Google can take cues from web browsers, which let you choose whether you want to go to a new tab or a specific web page(s). Gemini can also have options to default to a specific chat when reopened. That said, generative AI chatbots have endless possibilities given the vagueness of their work. You can mold them the way you want by attaching different connectors, adding custom instructions, and including source files. It remains to be seen what Google has in store for future updates and whether anything from this wishlist gets the green light. The search giant released a stream of new Gemini updates in recent months, including Gemini 3.5 Flash and Gemini Omni Spark, adding that it now has 13 products with more than a billion users each. What do you want to see in the Gemini app? Tell us in the comments.
    • What should AI detector tools show before users copy or export a report?

      By Barney T. · Posted

      Thank you for the post. Just a FYI that links to an outside site or promoting specific software is considered spamming here. Asking general questions is fine.
    • Microsoft confirms Windows 11 26H2 to finally get one of the most requested features

      By Michal H. · Posted

      not in taskbar search
    • What should AI detector tools show before users copy or export a report?

      By sumytbe · Posted

      I have been thinking about AI detector tools as a software workflow rather than a single "AI score" widget. When someone pastes text or uploads a document, the UI can return a report with a probability-style score, sentence highlights, reliability notes, and limitations. The useful part is that it can point a reviewer toward passages worth reading again. The risky part is that a polished score can look more certain than it really is. For people who build or review web apps, what should happen before the user copies or exports that kind of report? The minimum I would expect is: A clear input boundary for pasted text versus document files. Limits shown near the workflow, including minimum text length and maximum file size. A report label that says the result is a signal, not proof of who wrote the text. Sentence highlights and evidence notes alongside the global score. Reliability notes when the sample is too short or lacks enough sentence variety. False-positive and false-negative caveats that remain visible in copied/exported summaries. I am trying to avoid the pattern where a clean report card becomes the whole product story. For AI detection, "review this evidence in context" seems more honest than "trust this score." Would you keep the warning text visible on every report, or make it collapsible so the main result stays easier to scan? Disclosure: I work on a small AI detector/reporting workflow, but I am intentionally not linking it here. I am asking about software and report design, not promoting a site.

  • Recent Achievements

    • Conversation Starter
      sumytbe earned a badge
      Conversation Starter
    • One Year In
      B4dM1k3 earned a badge
      One Year In
    • One Year In
      DarkWun earned a badge
      One Year In
    • Dedicated
      Almohandis earned a badge
      Dedicated
    • Dedicated
      JuvenileDelinquent earned a badge
      Dedicated

  • Popular Contributors

    1. 1
      +primortal
      507
    2. 2
      +Edouard
      181
    3. 3
      PsYcHoKiLLa
      86
    4. 4
      Michael Scrip
      78
    5. 5
      Steven P.
      76
    Show More

  • Tell a friend

    Love Neowin? Tell a friend!