3 ms·
All six of the (major) banks I use require username and password only. And four of those limit password length to less than 12 characters.
by tatersolid 8y ago
All six of the (major) banks I use require username and password only. And four of those limit password length to less than 12 characters.
- MarkMc 8y agoI should have said 'extra information', not 'extra field'. A username with random characters like C85Y922 is clearly more secure than an email username. Of the 6 major banks you use how many have email address as the username?
- tatersolid 8y agoSome require a separate username crafted by the bank, but they are low entropy. Something like last name plus 2 digits. One is a clearly sequential integer of limited range. Usernames are not secrets and add no security by being kept secret. Just lengthen the damn password instead!