Please fix your Modern Bill Password Changer

[Heimdol]

I never seen a password system (specially for billing) that won't except complex passwords. I can change my password to a very simple one like aaabbbccc111 but if I try to change it to something more difficult for the hackers to figure out like R1uVJlMa724Srp it just won't let me. I've tried so many combos of hard passwords I'de like to use and it just won't take any of them. It's almost like the system is setup to only allow easy to figure out passwords. Is there a trick to being able to set a difficult password on this system?

You need more detailed instructions on that page as to what exactly it needs in order to make it a valid password for your system. I tried with 6 characters all the way up to 26 characters with numbers and letters both uppercase and lowercase yet it just doesn't seem to want to except anything unless I dumb it down.

I sent a ticket in about this back in 2008 when I wanted to make my password more secure back then and now I'm trying again and still can't do it.

btw: I'm not using any special characters at all. Just letters and numbers.

This is what is says on the password page: (3 char: Aa-Zz & 0-9 only). If I'm reading this correctly then your password needs to be at least 3 characters and can use any combination of uppercase/lowercase letters and numbers. Looking at the example password I use in my first paragraph you can clearly see it falls in to this restricting yet the system would not except it or any others that should have been valid and more secure.

Please fix your system to allow more secure passwords or at least give better details on the password change page as to what your billing system will except for passwords.

Thank you.

Just email me at drew@hostgator.com what you want to use, and I'll set it to that in the database.

Edit:
I do agree with you though that ModernBill shouldn't do it that way, and I don't believe this is something that can be changed. GatorBill (the new billing system you will be on soon), allows any special character in the password.

[esl]

Originally Posted by GatorDrewH

Just email me at drew@hostgator.com what you want to use, and I'll set it to that in the database.

Edit:
I do agree with you though that ModernBill shouldn't do it that way, and I don't believe this is something that can be changed. GatorBill (the new billing system you will be on soon), allows any special character in the password.

I think emailing it might defeat the purpose of high security.

[Heimdol]

Originally Posted by esl

I think emailing it might defeat the purpose of high security.

It's weird you say that cause I also believe that emailing passwords is completely against all common sense when it comes to security yet HG seems to do it frequently. If your just resetting your password cause you forgot it and they are just sending you temp one then I can see the logic in that. However, I have had them send my Cpanel password through email to me in just a autoreponse mail that came from their system. This happened last year.

Now a few days ago I requested a username and password for the Sitebuilder tool and they said they would email the username and password in a day or so. Well guess what I got? Yep low and behold the password was my dang Cpanel password that they sent yet again through email. This makes no sense at all from a security point of view. It's the one big problem I have with HG.

I mean love everything else but security just doesn't seem to be as strict as it needs to be not only with the mailing of the main account password but by not allowing you to use a strong password on the billing system. Though according to the post above the billing system is going to be changed and the new one will allow this which is good. Now we have just got to get them to stop sending the master account password through the email everytime you make any kind of automated request with them and things will be much safer.

[cptbob123]

If passwords are requested I login to tickets.hostgator.com and update there over SSL.

But it shouldnt be asked over email I agree!