I'm having a bit of trouble over at Gamestop trying to change my password. The brilliant thing is that they don't have a help page dedicated to it and the one dedicated to Impulse subscribers doesn't actually load. Needless to say I won't be spending any more money there any time soon.

But, this brings me to a point that's often ignored. How stupid, lazy or cheap can you be to not bother to verify that the password that's been input is one that the site is going to allow? It's rather shocking to me how often I'll put in a password that's too long and where the site doesn't verify that it's valid. What's more it shocks me that there's this surprised expression when I tell them that it isn't something that competent programmers would miss.

Password validation is something which is incredibly important if you want to be using it as a part of the security for the site. What's more people tend to assume that if they know what the password is that they can just enter it and gain access.