This question already has an answer here:
I know there's been a lot of discussion about password strength and indicators when signing up. I often find that when I forget a password for a site, its because I can't remember which set of rules were in place for that site (ie, >10 chars, special chars, no numbers) and if I knew those rules, Id remember which algorithm I used for my password.
To me, it seems like it's worth giving the user a hint about what the password rules were, before forcing them to go through the whole forgot password process. I'm finally able to implement something like this on our site, but I was curious about the UX of it.
With that said, has anyone seen this done in practice/know of a reason not too?
I've often thought the argument against this falls under the vague umbrella of security-- "If we display this information it will be easier to crack the password"-- but I can obtain the same information by attempting to create a new account