Login widget used on Vaadin web page doesn't allow hyphens in passwords

Safari’s secure password generator defaults to including ‘-’ in the standard character set, resulting in an annoying UX on MacOS.

Also, it is a huge red flag to disallow any specific characters or character sets in password fields as it would seem to advertise improper escaping, field validation, and/or hashing practices.

Thanks for reporting. Agreed. Our website team has fixing it on the backlog.