Unicode in passwords

[Mathias Bynens]

> On 1 Oct 2015, at 07:19, Marc Durdin <marc at keyman.com> wrote:
> 
> 2.       The number of dots corresponds to the number of code points, which is misleading with complex scripts or advanced input methods: you won’t necessarily see one dot per keystroke; in some cases, typing a character may replace a dot with another dot or even delete a dot.

Lots of systems have a bug where supplementary code points show up as two dots instead of one, due to UTF-16 being used internally. OS X is an example. Demo (open in your browser):

    data:text/html,<input type=password value=&#x1D306;>