Re: Unicode in passwords

From: Mathias Bynens <>
Date: Thu, 1 Oct 2015 09:59:22 +0200

> On 1 Oct 2015, at 07:19, Marc Durdin <> wrote:
> 2. The number of dots corresponds to the number of code points, which is misleading with complex scripts or advanced input methods: you won’t necessarily see one dot per keystroke; in some cases, typing a character may replace a dot with another dot or even delete a dot.

Lots of systems have a bug where supplementary code points show up as two dots instead of one, due to UTF-16 being used internally. OS X is an example. Demo (open in your browser):

    data:text/html,<input type=password value=&#x1D306;>
Received on Thu Oct 01 2015 - 03:00:24 CDT

This archive was generated by hypermail 2.2.0 : Thu Oct 01 2015 - 03:00:25 CDT