Seed data from Thomas's policy observations. Needs re-verification.

Name: PayPal Password Policy Grade
Item: PayPal
Rating: 8
Author: PassFail.wtf Community

Final grade

rubric v1.1

83/110

75% · pass

10/20

20/20

18/25

20/20

15/15

0/10

Tested · 2026-01-01

Verified · 0 independent testers

Agreement · 0% of 0 votes

Scorecard

Ten categories, 110 points, NIST SP 800-63B aligned.

01.

10 / 20

Password Length Policy

20 char max — major payment processor should do better

02.

20 / 20

Character & Composition Rules

03.

18 / 25

Multi-Factor Authentication

Supports authenticator apps

04.

20 / 20

Anti-Pattern Penalties

05.

15 / 15

Password Manager Compatibility

06.

0 / 10

Breach Response & Credential Hygiene

Help the community by testing this policy yourself. Earn +5 karma for each verification.

Grade valid 6 months from test date · submitted 1mo agopassfail.wtf/site/paypal