Created a password I can't change or use for Genie

[spickelmier]

I use a tool to create long and random passwords, 50 characters with lots of special characters.  I set my admin password to one of those strong passwords and it works fine for logging in via the web interface.  However I am unable to use it for Genie.  As a result I tried to change it to a simpler password, but the password change form reports it as invalid (i.e., not the old password), but I can still use it for login.  Has anybody else seen any issues like this?

Thanks!

Rick

[spickelmier · Accepted solution]

Thanks!  I believe I am using the latest, it's just a couple of weeks old and I updated it immediately.  It looks like one of the routes to enter/validate a password is allowing more than 32 characters to be used and that is causing the issue.  

I will make sure I keep it at 32 when I reset the device.  

Personnally I hate it when there are limits on password length, it makes me question how they are doing password management on the backend (any password storage should be hash based (or the equivalent) and that is a fixed length completely independent of the length of the password itself).

Rick

[michaelkenward]

To regain control of the thing, you could reset it to factory defaults. This would set the router's password back to the default and you can then give it a more "friendly" new password.

PS I assume we are talking router password here, not wifi.

[spickelmier]

Yeah, I was eventually going to do that, but wanted to see if it was a known issue.  And yes, the admin password, not the WiFi one.

[ElaineM]

@spickelmier The password has a limit of 32 characters. Are you using the latest firmware of the R7000?

[spickelmier · Accepted solution]

Thanks!  I believe I am using the latest, it's just a couple of weeks old and I updated it immediately.  It looks like one of the routes to enter/validate a password is allowing more than 32 characters to be used and that is causing the issue.  

I will make sure I keep it at 32 when I reset the device.  

Personnally I hate it when there are limits on password length, it makes me question how they are doing password management on the backend (any password storage should be hash based (or the equivalent) and that is a fixed length completely independent of the length of the password itself).

Rick

[ElaineM]

You're welcome.

Let us know if you still encounter anymore errors.