I just bought a new Roku. The MAX app won’t let me sign in without a 10 character password. My account is old enough to be before this was a requirement. I can sign into their website with my 8 character password just fine.
Save the security lectures. It is a random password only used there. The chance of it being in a world list or brute forced are practically 0.
Just repeat the last character two more times and call it a day?
I’m going to have to just reset it, I don’t want to as I have it on at least 5-6 devices. That most likely won’t get the app to work because it is more than likely hashed. Checking password requirements on front end code like that, especially the login prompt is just terrible design.