This question already has an answer here:
I have a question that has been bothering me some time, let me illustrate my question with an example:
- I use multiple passwords in many applications and sometimes I forget what is the password for some site.
- At this point, I do what anyone will do in my situation, try again, and when nothing else comes to mind, reset my password.
- Multiple times I've come to find that the password requirements of the current site is different from the common ones (for example, a-z A-Z 0-9 _? and 8 length) and when I input a password that matches the requirements, I come to find that was my original password all along.
If the site had told me the password requirements I might have remembered correctly my password
So my question is, Why does no one ever show these requirements? Is there any reason for these?
Edit1: I still don't see why showing the password requirements will be a security issue if the page I'm accessing has public registry on and I can see the requirements once I try to create an account
Edit2: yes, this question is a duplicate, It was originally posted in programmers.stackexchange.com and I didnt find a similar question