So I was registering to do my March Madness bracket on ESPN (not that I know anything about college basketball – I just randomly picked teams), and it asked me for a password.
Now, the good side of this is that it did inline validation to make sure I was entering valid data.
The bad side is that I got this:
At first glance everything appears ok – there’s a nice little green checkmark. But if you look more closely, it also says “Password Strength: Bad”.
Well which is it, good or bad? They should probably show some sort of password strength meter as long as the password is valid and present errors in a completely separate way – for example, highlighting the field with an error message.