Bad chracter (&) in WordPress password produces error when making new site

Bug Summary

Error when choosing a “bad password” that breaks the site creation script. Specifically it’s the & chracter. The user is allowed to enter their own password, therefore given the ability to choose a malformed password with characters that break site creation. Suggest prefilling the username and password fields like WordPress does to prevent this.

Steps to reproduce

  1. Set up a new website
  2. When you get to the screen to choose a WordPress admin and password, enter: 8Tn#4Pq&rX2@5Qw% for the password
  3. The & character breaks site creation and creates an error

Screenshot: https://i.postimg.cc/qqCXLcBr/bad-pass.jpg

Hi @thewpgirls! This is a long time known limitation for Windows users. We have a mega thread here and mention it in our Windows guide below as well: