8

The maximum size is 100 characters. FYI, the minimum is 8.


6

I was able to work around this by turning on 2-step verification, setting up app passwords, then turning 2-step verification back off. When you turn it off, it asks if you want to clear verification data. I said no; I don't know whether that matters. After turning it off, the app passwords link is still available, and my applications still login fine.


6

Ok. What happens? Well, depending on the path you follow, different things. For example, you can be asked to fill out a form that asks you questions regarding information relating to your account, as is described in this article. Then, as that article says, someone at Facebook reviews the information and checks it against what they already have. Once ...


5

GitHub does not provide any way to set custom password policies; all accounts are independent. (Implementing such support would require the passwords to be stored in a plaintext/decryptable form, which is even worse for security.) You could set up your own Git server – using Gitolite if you need detailed access control, but even pushing over plain ...


5

I figured this out, but I wanted to post this here so others can learn. I could not find a good FAQ or help page to explain this. I changed my password using the Hotmail.com web site last night. For good security, I selected a long password of 19 characters. Logging in from the web worked fine, but when I tried to update my password on my mobile devices I ...


4

Microsoft now no longer restricts password length for the Windows Live accounts unless you want to sign in to Xbox Live on the Xbox 360: I successfully set a 32 character password with a password manager, and signing in to Windows Live does not work unless I enter the full password, so it seems they are not limiting to the first 16 characters anymore.


4

When you login account using Facebook it synchronize your account with Facebook by using details from Facebook and didn't ask for password. But when you login account from a separate device or PC, it will ask for the password. See from the Instagram Help Center how to reset/create a new password: If you can't remember your password, you can reset it ...


4

It's likely that the number is only used to send you a code. I doubt you would be able to call the number to speak with someone. You should consider a hardware key like the Yubikey for a second factor. SMS (and your phone number) are vulnerable to being stolen which could give a hacker access to your account. https://www.yubico.com/products/yubikey-...


3

You are doing it right. When you login account using Facebook it synchronize your account with Facebook by using details from Facebook and didn't ask for password. But when you are deleting account they want you to login it separately and then delete. From the Instagram Help Center page, To delete your account: Leave the Instagram app and log into ...


3

Report it to Facebook from here - https://www.facebook.com/hacked


3

Please see my comment. Trello uses HTTPS which means all your communications are encrypted, but the data for Trello is not encrypted on disk. We might offer this in the future for pay. Some people (me) are comfortable storing usernames, account numbers, and passwords (or at least password hints) to trivial things like frequent flier accounts in cloud-based ...


2

Bookmark and use https://www.facebook.com/login.php instead - the signup form that Facebook also put on the frontpage facebook.com causes issues with Lastpass.


2

No, there is no way to retrieve application-specific passwords. They are - indeed - for one-time-use - I was not able to use the same password on more than one app without getting a password invalid message. The number of application specific passwords is unlimited.


2

I just verified what waiwai said, and only a hash was transmitted to the lastpass server, and only encrypted passwords were returned. It looks like a key derived and stored in local storage. To steal your master password, a vulnerability or compromise of the server would (or at least should) be needed for someone to modify the way the application behaves. ...


2

Try logging out of your Twitter account after logging in, it might logout your account from any device it's logged in on. But on most mobile devices, apps login to your account and to make the app logout from your account. To revoke access of apps go to this URL https://twitter.com/settings/applications and Revoke Access to the app your friend's device ...


2

I believe this goes away if you are a premium user. Free users agree to the Terms of Service that allows them to do trickery like this. It is annoying, but remember that you are using a free service and you have to deal with annoyances like this.


2

Facebook have a Help page entitled How do I claim a Page that already exists for my business? Can I merge it with my business's official Page? If no one is managing the Page, you can request to claim it: From the Page, click below the Page's cover photo Select Is this your business?. Add and verify information about your business, like the address ...


2

Turns out it's hidden in plain sight, but I missed it, so the direct link is https://account.activedirectory.windowsazure.com/AppPasswords.aspx


2

Yes, the hotmail password is limited to 16 characters. A few Reason for Maximum Password Length gives some reasons as to why some providers choose a maximum length. See also Why are passwords limited to 16 characters?. Source Outlook webmail passwords restricted to 16 chars - how does that compare with Yahoo and Gmail? It seems that Outlook.com won't ...


2

You should be able to revoke access via the Web using by going into Settings, then apps. This article in the support docs goes through the process in more detail: https://support.twitter.com/articles/20170805#revoke-access-web In there you should see "iOS by Apple", click on revoke access and this should log you out of all iOS device using your Twitter ...


2

To revoke trusted devices, do the following: Go to https://account.live.com/proofs/Manage Click on Remove all the trusted devices associated with my account under Trusted devices section


2

According to the Google Product Forums thread referenced by the asker, this was a bug that Google eventually fixed sometime before 2016-03-16. Unfortunately, for this sort of question where there is really no action that the user can take to resolve the issue, the best course of action is to report the issue to Google. Google’s main support article for the ...


1

UPDATE: Host web pages with Google Drive is not be available since August 31, 2016. At this time, Google Drive doesn't have access control for files to be used as web resources for a website.


1

No, Gmail does not currently have such a feature. It's unlikely that such a feature would be added. (And if such a did feature did exist, what's to stop your hypothetical attacker from knowing about it, and sending himself an e-mail to make sure that you didn't activate it.)


1

I don't think that exists. Alternative: You should have a separate email address for those "users with limited rights". Forward automatically all incoming emails to that second address and let those users access only that address. Then, they can then delete any emails they want, that won't affect the main email inbox. This is extremely easy to setup in ...


1

Change your password! it will log out your account from any device that has been logged in any device.


1

Google crawlers do not access password-accessed page, unless the website has been purposefully designed so (see Managing crawler access).


1

Go to https://security.google.com/settings/security and then click "Change password". If the hacker changed your password and you can't access it, try to recover your account from https://www.google.com/accounts/recovery


1

It looks to be a phishing scheme. As long as you did not click on any of the links, you should be fine.


1

I think I've got an idea that might help. Create another Google account and only use that one for Reader. Since you are only going to use it for Reader, you might not even care to use 2-factor auth but it should not matter either way now.


Only top voted, non community-wiki answers of a minimum length are eligible