What is current practice when it comes to localization of passwords? I know many systems, even where Latin/romanised text is not used, do not recognize/accept two-bit/unicode passwords. My instinct is to make unicode characters available for passwords, but am not sure if there is sufficient server support for such a requirement.
|
Quote from Wikipedia page on Unicode. That says it all, doesn't it? |
|||
|
|
|
You should let people use whatever is natural to them for input, and that means accepting Unicode. If someone is Russian, forcing them to use ASCII characters is a poor UX. If they enter their password in a particular character set, it's their responsibility to make sure that they are typing in that character set when they enter it again later. I can't see a lot of people complaining about this, as for people that deal with multiple character sets, it's normal to deal with this. However I can see a lot of people being frustrated that you are forcing them to use a character set that they either don't have on their keyboards, or simply don't know. The final reason is that it is better security if people are allowed to use Unicode characters in their password. |
|||
|
|