A crowdsourced collection of websites with frustrating and counterproductive password requirements.
Dumb Password Rules is a crowdsourced website and database that collects and displays examples of websites with frustrating, insecure, or nonsensical password requirements. It highlights poor security practices in the wild to educate developers and users about better password policy design.
Web developers, security professionals, UX designers, and anyone interested in password security and user experience who wants to learn from real-world anti-patterns.
It provides a unique, publicly accessible repository of real-world examples that can be used for education, critique, and advocacy toward more sensible and secure password policies.
A compilation of sites with dumb password rules.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Offers a searchable database of actual websites with problematic password rules, providing tangible evidence for education and critique, as seen on dumbpasswordrules.com.
Allows anyone to submit examples via pull requests or direct messages, ensuring a diverse and growing collection, with clear contribution guidelines.
Includes a social media bot that posts random rules on platforms like Mastodon and Bluesky, extending awareness beyond the website.
Maintains open contribution docs and a public list of contributors, fostering community trust and collaboration.
Focuses solely on criticizing poor practices without providing best practices or implementation advice for secure password policies.
Depends on users manually finding and submitting examples, which can lead to incomplete or slow updates, as noted in the contribution process.
There is no automated mechanism to verify if listed sites have changed their rules, risking outdated information in the database.