Windows 8 RP Still has Password Flaw?

By zeroomegazx
in The Fast Ring (Insider Previews)

 Share

Recommended Posts

Grand Master

BajiRav

Posted
Posted

I know the Consumer Preview of Windows 8 had a 16 Character password limit which limited me from linking my hotmail account with my Logon. It appears this is still the issue. Is this an actual limitation now or still a bug MS overlooked? Anyone else seeing this as well?

I'd hit that problem even before Windows 8. The Zune software has a similar limit and I had to reduce my password length to make it work.

I don't have that long password anymore to try it with RP. :/

Grand Master

Noir Angel

Posted
Posted

I know the Consumer Preview of Windows 8 had a 16 Character password limit which limited me from linking my hotmail account with my Logon. It appears this is still the issue. Is this an actual limitation now or still a bug MS overlooked? Anyone else seeing this as well?

Yep, I ran into this problem as well it wouldn't let me log back on until I changed my live password (and if your Windows 8 computer were to be your only Internet access the ramifications of this are potentially pretty serious)

Grand Master

Noir Angel

Posted
Posted

I think it's a limitation with Hotmail/Windows Live. I have a 20 character password but I can log-in just fine with only 16 characters.

It shouldn't be, I never had that problem with messenger or hotmail, Windows 8 was the first time it rejected my login due to the length of my password.

Enthusiast

zeroomegazx

Posted
  • Author
Posted

I think it's a limitation with Hotmail/Windows Live. I have a 20 character password but I can log-in just fine with only 16 characters.

Yeah I can't log into my hotmail accoutn with only 16 chars of my password (just tested) MS had better fix this or secure password users are going to be screwed. Of note it should also WARN you when you try to link if you type in MORE than a 16 char password.

Grand Master

Argi

Posted
Posted

Can you please clarify what the exact situation is? You can't create a Win8 account from a Microsoft Account when its password is longer than 16 characters? Or, only the first 16 characters of the password are checked when logging in via Windows 8 via MSFT Account?

I think it's a limitation with Hotmail/Windows Live. I have a 20 character password but I can log-in just fine with only 16 characters.

That might be the case. Seems as though there are a lot of mentions about it on the net.

Enthusiast

zeroomegazx

Posted
  • Author
Posted

Can you please clarify what the exact situation is? You can't create a Win8 account from a Microsoft Account when its password is longer than 16 characters? Or, only the first 16 characters of the password are checked when logging in via Windows 8 via MSFT Account?

That might be the case. Seems as though there are a lot of mentions about it on the net.

Issue:

When creating a Microsoft account and linking it with a LIVE or HOTMAIL account it lets you register said account with a password longer than 16 characters, however upon reboot when you go to enter in your password it only takes 16 characters max of your password thus not authenticating with LIVE and locking you out of your account on the computer.

This can also be seen if you create a LOCAL account and try to sign into the App Store with a LIVE or HOTMAIL account with a password longer than 16 characters.

*this was also present in the Consumer Preview.

Grand Master

Argi

Posted
Posted

Issue:

When creating a Microsoft account and linking it with a LIVE or HOTMAIL account it lets you register said account with a password longer than 16 characters, however upon reboot when you go to enter in your password it only takes 16 characters max of your password thus not authenticating with LIVE and locking you out of your account on the computer.

This can also be seen if you create a LOCAL account and try to sign into the App Store with a LIVE or HOTMAIL account with a password longer than 16 characters.

*this was also present in the Consumer Preview.

So the password field is capped at 16 characters or characters beyond that seem to be ignored? To be perfectly clear.

Enthusiast

zeroomegazx

Posted
  • Author
Posted

So the password field is capped at 16 characters or characters beyond that seem to be ignored? To be perfectly clear.

The password field allows more characters to be entered but it is only picking up the first 16, from what I have encountered anyways. I think that is why it was so hard to identify. Also I have repeated this on multiple computers and hotmail accounts.

It was an acknowledged but by MS, odd they didnt fix it.

Grand Master

Argi

Posted
Posted

The password field allows more characters to be entered but it is only picking up the first 16, from what I have encountered anyways. I think that is why it was so hard to identify. Also I have repeated this on multiple computers and hotmail accounts.

It was an acknowledged but by MS, odd they didnt fix it.

Hrm odd. I've never tried it but can Windows 7 handle passwords longer than 16 characters or has this been some limit that's been around for a while?

Enthusiast

zeroomegazx

Posted
  • Author
Posted

Hrm odd. I've never tried it but can Windows 7 handle passwords longer than 16 characters or has this been some limit that's been around for a while?

Windows 7 and Windows 8 Can handle passwords longer than 16 characters, it seems to be only a limit when linking to a MS account (live/hotmail)

Grand Master

Noir Angel

Posted
Posted

Can you please clarify what the exact situation is? You can't create a Win8 account from a Microsoft Account when its password is longer than 16 characters? Or, only the first 16 characters of the password are checked when logging in via Windows 8 via MSFT Account?

That might be the case. Seems as though there are a lot of mentions about it on the net.

You can create an account, and your first login will work, but after that if you log off or restart you'll be unable to log in again, it'll just keep giving you a "wrong password" message.

Mentor

+KibosJ Subscriber²

Posted
  • Subscriber²
Posted

Hrm odd. I've never tried it but can Windows 7 handle passwords longer than 16 characters or has this been some limit that's been around for a while?

Windows 7 can handle more than 16 characters, this is a Microsoft Account/Microsoft Live Limitation, it has been around for years and NEVER fixed.

Grand Master

Argi

Posted
Posted

Ah, I see now. http://support.micro....com/kb/2432933

Check your password length

Make sure that your Windows Live password length is no more than 16 characters. This current maximum limit is clearly indicated during the initial Windows Live sign up, but may not be clear during a password change. On a password change it's possible to enter more than 16 characters, but your account won't accept anything over 16 characters. You can change your Windows Live password by visitinghttps://account.live.com/ChangePassword.aspx.(You may have to sign in to your Windows Live account before you can access this webpage.)

This topic is now closed to further replies.
 Share
Go to topic listing

  • Posts

    • OpenAI's new GPT-5.5-Cyber tops Claude Mythos 5 in vulnerability benchmark

      By pradeepviswav · Posted

      OpenAI's new GPT-5.5-Cyber tops Claude Mythos 5 in vulnerability benchmark by Pradeep Viswanathan OpenAI today announced a major expansion of Daybreak, a cybersecurity initiative designed to help defenders find, validate, and fix software vulnerabilities earlier in the development process. The availability of powerful AI models has definitely changed the cybersecurity landscape by making vulnerability discovery much faster. However, the bigger bottleneck for the industry is now patching those vulnerabilities. Impacted software teams need to validate the discovered issues, understand their impact, develop fixes, test them, and deploy patches. Back in March, OpenAI launched a preview of Codex Security, which uses agentic reasoning with automated validation to discover high-impact issues and actionable fixes specific to the codebase. Since then, it has scanned more than 30 million commits across over 30,000 codebases; more than 70,000 findings were marked as fixed by human reviewers, while over 500,000 findings were automatically determined to be fixed. Now, OpenAI is releasing an updated Codex Security plugin that can run deep scans, review recent code changes, generate security reports, trace attack paths, validate findings, and create codebase-specific patches for human review. It can also triage findings from existing scanners, advisories, bug bounty reports, and ticketing systems. OpenAI says the plugin can export results to vulnerability management systems and integrate with workflows using SARIF files, CodeQL queries, the Codex CLI, and the Codex app. Back in May, OpenAI announced the preview of GPT-5.5-Cyber, a new model built on top of the recently released GPT-5.5, designed for specialized cybersecurity work. Today, OpenAI launched the full version of GPT-5.5-Cyber through a limited release for verified defenders. On CyberGym, GPT-5.5-Cyber scored 85.6%, compared with 81.8% for GPT-5.5 and 83.8% for Claude Mythos 5. It also scored 39.5% on ExploitGym, compared with 25.95% for GPT-5.5, and 69.8% on SEC-bench Pro, compared with 63.1%. OpenAI also announced the new Daybreak Cyber Partner Program, which will allow security vendors and service providers to use GPT-5.5 with Trusted Access for Cyber in their products and services. Accenture, Akamai, Cisco, Cloudflare, CrowdStrike, IBM, Palo Alto Networks, Proofpoint, SentinelOne, Wiz, Zscaler, and others were listed as initial partners for this program. OpenAI is also launching Patch the Planet with Trail of Bits, HackerOne, Calif, researchers, and maintainers. More than 30 open-source projects have committed to participate, including cURL, Go, Python, Sigstore, and pyca/cryptography.
    • AMD confirms 26.6.2 FSR driver breaks on many Windows PCs

      By hellowalkman · Posted

      AMD confirms 26.6.2 FSR driver breaks on many Windows PCs by Sayan Sen Earlier today AMD released a major graphics driver update as it brings support for FSR 4.1 to Radeon RX 7000 series GPUs. The new update, version 26.6.2, also brings support for Assassin's Creed Black Flag Resynced and more. And while the driver technically supports Windows 10 version 21H2 and newer, the tech giant has confirmed that there is a major issue with the new driver on non-Windows 11 PCs as it fails to launch properly on such systems. The error message says, "The version of AMD Software that you have launched is not compatible with your currently installed AMD graphics driver." Therefore on the surface it looks like a compatibility problem. AMD has also confirmed that the device manager will display the yellow bang or yellow exclamation sign alongside your GPU under the Display adapters dropdown. Here is what the Radeon team's official advisory recommends to affected users: "Users Running Windows 10 and AMD Software: Adrenalin Edition 26.6.2 May Encounter Yellow Bang in Device Manager Affecting AMD Radeon RX Series Graphics ... Our Engineers are currently investigating this issue and will provide a fix once it is available. Affected users may revert to AMD Software: Adrenalin Edition 26.6.1 as a temporary workaround." As such you should revert back to the previous 26.6.1 driver which was released earlier this month. In case you were looking to play Assassin's Creed Black Flag Resynced and DOOM: The Dark Ages | Revelations you will probably have to wait a while if you want the driver to support those games officially. You can find the support article here on Microsoft's website.
    • Microsoft confirms Windows 11 26H2, urges IT admins to prepare for release

      By nekrosoft13 · Posted

      https://uupdump.net/selectlang...7829-4524-978d-7b5fe79263e3
    • Microsoft is building an AI datacenter that "uses less water than a fast food restaurant"

      By +TRS-80 · Posted

      A McDonald's restaurant uses about 1.5 to 2 million gallons of water per year for operations like food preparation, cleaning, and restrooms. That is a lot less than the 2,083 gallons of water per megawatt hour mentioned above.
    • Anyone Here With Turbo Pascal Experience?

      By +TRS-80 · Posted

      Turbo Pascal Original authorAnders Hejlsberg (at Borland) DeveloperBorland Release20 November 1983; 42 years ago[1][2] Operating systemCP/M, CP/M-86, MS-DOS, Windows 3.x, Classic Mac OS PlatformZ80, x86, 68000, PC-98 https://en.wikipedia.org/wiki/Turbo_Pascal It was the one language I actually learned to program in.   I wasn't very good at it and never used it at work.    If anyone has any personal Turbo Pascal stories or personal accomplishments using it, please take a moment to share.   Thanks. Peace

  • Recent Achievements

    • Week One Done
      Almohandis earned a badge
      Week One Done
    • Rookie
      dorf went up a rank
      Rookie
    • First Post
      mike_rumble earned a badge
      First Post
    • Dedicated
      tuben earned a badge
      Dedicated
    • Week One Done
      mnsgroup earned a badge
      Week One Done

  • Popular Contributors

    1. 1
      +primortal
      504
    2. 2
      +Edouard
      208
    3. 3
      PsYcHoKiLLa
      100
    4. 4
      Michael Scrip
      88
    5. 5
      neufuse
      71
    Show More

  • Tell a friend

    Love Neowin? Tell a friend!