A form letter to send to my accounts where they have terrible 1990s limits on passwords.

FormLetterPasswords

The current password policy is insufficient for properly securing my account. 

While trying to reset my password I noticed a limit of {pw_limit}.

1. This artificially imposed limit locks my account password to only {pw_limit} characters and not all symbols.
2. The above suggests the passwords are stored in plain text. Which is never a good thing.
3. The current input limit is {pw_limit} characters. Google recommends a 60 character limit and 8 character minimum.
4. I typically use passwords of at least 20 characters and use any symbol available in the regular US key set.

Please upgrade the service to be able to handle passwords of greater length, symbols, and enable proper hashing and salting. For reference please see the following.

http://krebsonsecurity.com/password-dos-and-donts/
https://support.google.com/a/answer/33386?hl=en
https://crackstation.net/hashing-security.htm
http://plaintextoffenders.com/about/

Please let me know when a remediation plan is in place. 

Regards,
{my_name}