Adelaide Metro Buy & Go 4+

The password requirements are absolutely ridiculous and only serve to reduce security. It has long been proven that password LENGTH and not complexity provide better security than obscure requirements. Developers: search “XKCD password complexity”; your password requirements are hard for humans to remember and easy for computers to guess. Consider using a password complexity library such as “zxcvbn”. All the current password requirements tell us is that whoever wrote the bizarre requirements has absolutely zero clue about information security. I’d even hazard a bet that the requirement was copy-pasted from some outdated system requirements document which is 20 years outdated.

To fix it, remove ridiculous complexity requirements and use a modern library (like zxcvbn) to calculate compute complexity (ie how long it takes a machine to brute force the password). Make the various forms work seamlessly with password managers and built-in device password generators. These will generate far more secure passwords than a human trying to manually satisfy some BA’s ignorant perception of password complexity requirements. Grrrr.

Also seems like I can’t use aliases on my email address (I’m guessing, can’t sign up, no reason why). This thing is 20 years outdated already.

Got the app to buy daytrip tickets but got to making an account and gave up.

Also after reading the instructions on the website and some of the reviews, I have some confusion about why Adelaide Metro even bothered with this app and what need they were trying to address…

1. Why do I need a seperate account from my metrocard account and why are the password requirements so silly?

2. I can’t even manage my metrocard on the app, I still have to log in to the website for that.

3. You can’t even add the tickets to your apple wallet to use, you have to unlock your phone, open the app and then you can use the tickets…

4. Surely it would have made more sense to just develop a digital metrocard?

5. If you’re going to have a daily ticket option, can we please have a daily fare cap?

Kind of wonder how much Adelaide Metro spent on not just designing this app interface but the whole backend system only to offer no improvement of services…

Great to see moves in this direction, a few things I’d fix first to simplify sign-up:
* password requirements are incompatible with e.g. Apple’s default password generator and other password vault apps
* doesn’t support generating a password with Apple Keychain
* should allow instant sign up with Apple/Google ID

Aside from these onboarding (pardon the pun) challenges, while I occasionally would like to handle multiple tickets (e.g. when travelling with kids or a bike), this is what I want out of this app:
* get on the train
* swipe phone on reader without unlocking phone
* credit comes off my metrocard, which recharges automatically (this already works) OR better yet, I get automatically charged monthly (I don’t want an item in my bank statement for every time I catch a train), up to the value of a monthly pass and no more (this is basically how it works in NYC, except IIRC you don’t even need to sign up for an account).

Thanks for your efforts!