4 ms·

It was discovered today that Wells Fargo passwords are case-insensitive: https://www.reddit.com/r/personalfinance/comments/66n4li/i_just_discovered_that_wells_

• rincebrain 9y ago
  To be fair, until sometime in the last ~2 years, Schwab PWs were alphanum case-insensitive 6-8 characters only.
  • myrandomcomment 9y ago
    So I know this also :) I am a techie that made a bit of money and it was kept at Schwab. I made a big enough issues of it that they arranged a call with their security team. The call was good and they explained the reason why (legacy system) and their plans to update / fix it. They also address my questions about password storage (hashing/salt) - they did it correctly. They showed a great deal of knowledge and competence in their job, such that I was willing to leave my money. I applaud their willingness to have the call. My dealings with them have always been pleasant.
• Chaebixi 9y ago
  It's 2017, and I still have online financial accounts that are "secured" by short numeric PIN, so count yourself lucky that you can at least use some letters in your password. C-mp-t-rsh-r-: your website's trash and you should be embarrassed with yourselves.
• bussierem 9y ago
  Just today...? Chase Bank has been case-insensitive for several years now. I even contacted them about it when I found out and they outright told me they had no plans to fix it.
  • cookiecaper 9y ago
    Tons of companies do this because it substantially diminishes the number of support calls/complaints that they get related to unsuccessful logins.