3 ms·
I should have said 'extra information', not 'extra field'. A username with random characters like C85Y922 is clearly more secure than an email username. Of the
by MarkMc 8y ago
I should have said 'extra information', not 'extra field'. A username with random characters like C85Y922 is clearly more secure than an email username.
Of the 6 major banks you use how many have email address as the username?
- tatersolid 8y agoSome require a separate username crafted by the bank, but they are low entropy. Something like last name plus 2 digits. One is a clearly sequential integer of limited range. Usernames are not secrets and add no security by being kept secret. Just lengthen the damn password instead!