The reviewer who flagged my password hint, now I use a passphrase
Some auditor in Chicago rejected my app for storing a password hint like 'my dog's name'. Switched to 4 random words instead, and it's honestly easier to type. Has anyone else had a compliance person force a change that actually made things better?