<story><title>Diablo 3 bug report: &quot;Passwords not case-sensitive.&quot;</title><url>http://us.battle.net/d3/en/forum/topic/5152409863</url></story><parent_chain><item><author>karlshea</author><text>Facebook does sort of the same thing:&lt;p&gt;&lt;a href=&quot;http://www.zdnet.com/blog/facebook/facebook-passwords-are-not-case-sensitive-update/3612&quot; rel=&quot;nofollow&quot;&gt;http://www.zdnet.com/blog/facebook/facebook-passwords-are-no...&lt;/a&gt;&lt;p&gt;Yes, it&apos;s possibly less secure. But for both Facebook and all of the Blizzard games there are other options if you are concerned.</text></item></parent_chain><comment><author>nostromo</author><text>Related, but different in an important way.&lt;p&gt;If your password is aBc, you can log in to Facebook using aBc (original), AbC (windows caps lock), and ABc (first cap) only.  For a regular password, this is just slightly less secure.&lt;p&gt;Being case insensitive entirely is quite a bit less secure (abc, abC, aBc, aBC, Abc, AbC, ABc, ABC).</text></comment>
<story><title>Diablo 3 bug report: &quot;Passwords not case-sensitive.&quot;</title><url>http://us.battle.net/d3/en/forum/topic/5152409863</url></story><parent_chain><item><author>karlshea</author><text>Facebook does sort of the same thing:&lt;p&gt;&lt;a href=&quot;http://www.zdnet.com/blog/facebook/facebook-passwords-are-not-case-sensitive-update/3612&quot; rel=&quot;nofollow&quot;&gt;http://www.zdnet.com/blog/facebook/facebook-passwords-are-no...&lt;/a&gt;&lt;p&gt;Yes, it&apos;s possibly less secure. But for both Facebook and all of the Blizzard games there are other options if you are concerned.</text></item></parent_chain><comment><author>tylermenezes</author><text>Facebook&apos;s is a little better - you can&apos;t disregard case entirely. Blizzard just cut the search space by a lot.&lt;p&gt;Then again, it would be pretty difficult to brute force a password in Battle.net, to be honest. I&apos;m assuming they&apos;d lock out the account after just a handful of tries.</text></comment>