<story><title>Diablo 3 bug report: &quot;Passwords not case-sensitive.&quot;</title><url>http://us.battle.net/d3/en/forum/topic/5152409863</url></story><parent_chain></parent_chain><comment><author>loup-vaillant</author><text>&lt;p&gt;&lt;pre&gt;&lt;code&gt;  Entropy of    [a-z0-9] per character : 5,1  bits
  Entropy of [A-Za-z0-9] per character : 5,95 bits
  Entropy lost by case insensitivity
                        (per character): 0,85 bits (15%)
&lt;/code&gt;&lt;/pre&gt;
Bottom line: add 2 characters, and your password stays strong. Still, it would cool to warn users, or at least explicitly advise them to use longer passwords.</text></comment>
<story><title>Diablo 3 bug report: &quot;Passwords not case-sensitive.&quot;</title><url>http://us.battle.net/d3/en/forum/topic/5152409863</url></story><parent_chain></parent_chain><comment><author>karlshea</author><text>Facebook does sort of the same thing:&lt;p&gt;&lt;a href=&quot;http://www.zdnet.com/blog/facebook/facebook-passwords-are-not-case-sensitive-update/3612&quot; rel=&quot;nofollow&quot;&gt;http://www.zdnet.com/blog/facebook/facebook-passwords-are-no...&lt;/a&gt;&lt;p&gt;Yes, it&apos;s possibly less secure. But for both Facebook and all of the Blizzard games there are other options if you are concerned.</text></comment>