It really should not be acceptable for financial contracts either. Consumers lost more than 16B to fraud in 2016: https://www.cnbc.com/2017/02/01/consumers-lo

It really should not be acceptable for financial contracts either. Consumers lost more than 16B to fraud in 2016: https://www.cnbc.com/2017/02/01/consumers-lost-more-than-16b-to-fraud-and-identity-theft-last-year.html https://www.cnbc.com/2017/02/01/consumers-lost-more-than-16b... The Equifax breach lost data of 145 million Americans. https://en.wikipedia.org/wiki/Equifax#May%E2%80%93July_2017_data_breach https://en.wikipedia.org/wiki/Equifax#May%E2%80%93July_2017_... Passwords are still the norm for online authentication, despite providing terrible user-hostile security. The US social security number is used both as an identifier, and as a static never-changing password.