Just received a "suspicious activity" password reset prompt email from PayPal.
I went to PP manually rather than clicking the link the email (on phishing suspicion). Email was legit; it prompted me to change password immediately.
So, I fired up Bitwarden to generate a new password with my default settings.
Nope. Needed to adjust down, because PayPal STILL has a 20-character limit on passwords! 🤬
SERIOUSLY, PayPal?!?!
At least they support 2FA, but get with the program, people.
Follow
^ My mobile phone carrier is even worse. 24-character password limit, but numbers and letters only. No 2FA.
I guess they want anyone with rainbow tables to have free access to our accounts.