---
title: 'Data Box Password'
url: 'https://www.ondrejsramek.cz/en/blog/heslo-k-datove-schrance'
markdown: 'https://www.ondrejsramek.cz/en/blog/heslo-k-datove-schrance.md'
lang: en
date: '2019-01-28'
description: 'Not like this… The data box system got a new look. And with that they also dropped the CAPTCHA verification on login. My primary goal was to send my tax return, but I had an expired password. So: log in, change it, send. Except... I generated a password in my password manager, entered it in the for…'
taxonomy:
  category:
    - 'informační technologie'
  tag:
    - heslo
    - 'datová schránka'
    - MV
    - ZoKB
    - VoKB
  '':
    - ''
  archives_year:
    - '2019'
---

# Not like this…

The data box system got a new look. And with that they also dropped the **CAPTCHA** verification on login. My primary goal was to send my tax return, but I had an **expired** password. So: log in, change it, send. Except... I generated a password in my password manager, entered it in the form, and saw: **Password must be a maximum of 32 characters.** I don't get it, but fine. I shortened it, entered it again, and this time saw: **Password contains invalid characters.**

I genuinely don't know... I generated a third one, made sure the special characters weren't too **exotic**... and entered it. Success! The password **meets** the requirements of Decree 194/2009 Sb.

A few things puzzle me: why do data boxes — a system certainly classified as **CII** — have their own decree governing passwords and usernames, when such things are already covered by **the Cyber Security Act and its implementing regulation**. Why not make life easier and adopt what applies to other systems instead of going, or continuing to go, down their own path.

I'll see where this goes — I'll write to **NÚKIB** and I'm curious what they'll say.

 [ Previous Post](https://www.ondrejsramek.cz/en/blog/collection-1) [Next Post ](https://www.ondrejsramek.cz/en/blog/podani-danoveho-priznani-elektronicky) 

#### Other Related Posts:

 [ ![Collection #1](https://www.ondrejsramek.cz/user/pages/05.blog/collection-1/Screenshot%202019-01-25%20at%2009.58.04.png) ](https://www.ondrejsramek.cz/en/blog/collection-1) [  heslo  ](https://www.ondrejsramek.cz/en/blog/tag:heslo#blog_list) [  leak  ](https://www.ondrejsramek.cz/en/blog/tag:leak#blog_list) [  Collection1  ](https://www.ondrejsramek.cz/en/blog/tag:Collection1#blog_list) 

###  Collection #1 

[Collection #1](https://www.ondrejsramek.cz/en/blog/collection-1)

# The biggest leak yet... of usernames and credentials.

I was curious what's actually in the largest collection of leaked data so far — Collection #1. I downloaded just under 40 GB of data. After extraction it came to just under 100 GB. I fired up Splunk and started indexing. It took almost the enti...

 17th Jan 2019 

 [  MUNI  ](https://www.ondrejsramek.cz/en/blog/tag:MUNI#blog_list) [  heslo  ](https://www.ondrejsramek.cz/en/blog/tag:heslo#blog_list) [  doporučení  ](https://www.ondrejsramek.cz/en/blog/tag:doporu%C4%8Den%C3%AD#blog_list) 

###  Passwords, passwords... passwords 

[Passwords, passwords... passwords](https://www.ondrejsramek.cz/en/blog/hesla-hesla-hesla)

# So what's the deal with passwords

I came across an article from [CSIRT-MU](https://www.online.muni.cz/vite/11220-kybertym-s-hesly-je-to-jak-se-zubnim-kartackem-menit-a-nesdilet) saying that passwords are like toothbrushes — change them and don't share them. The headline is catchy enough to draw readers in. However, I came away somewhat **disappointed** by the article. In the section on creating passw...

 8th Dec 2018 

- [Intro](https://www.ondrejsramek.cz/en)
- [Projects](https://www.ondrejsramek.cz/en/projects)
- [Portfolio](https://www.ondrejsramek.cz/en/portfolio)
- [Pricing](https://www.ondrejsramek.cz/en/pricing)
- [Blog](https://www.ondrejsramek.cz/en/blog)
- English 

    - [Čeština](https://www.ondrejsramek.cz/cs/blog/heslo-k-datove-schrance)

---

## Navigation

- Parent: [Blog](https://www.ondrejsramek.cz/en/blog.md)
- Previous: [Filing a Tax Return Online](https://www.ondrejsramek.cz/en/blog/podani-danoveho-priznani-elektronicky.md)
- Next: [Collection #1](https://www.ondrejsramek.cz/en/blog/collection-1.md)