4 ms·
Bank websites in some (developed, European) countries restrict you to 6-8 digit passwords (not alphanumeric), and don't have a 2FA option like Facebook or Googl
by concinds 5y ago
Bank websites in some (developed, European) countries restrict you to 6-8 digit passwords (not alphanumeric), and don't have a 2FA option like Facebook or Google do. It's a massive joke.
- munk-a 5y agoGranted that is on a phone where you can usually just swipe left to their email application and run through some forgot your password steps - also the 2FA that most people use is just SMS which goes to the same place. Assume that if someone has your unlocked phone they own your life.
- mkr-hn 5y agoThe concern with SMS is SIM cloning. An aspiring code thief doesn't need your phone once they can pretend to be your phone.
- hnick 5y agoMany must also store them in plaintext as well, or something like it, because the operator has to be able to confirm the spoken password for telebanking.
- ridaj 5y agoOh and it changes every 6 months "for security reasons" thus guaranteeing it's either very simple or you write it down!
- kblev 5y agoMy favourite was when I needed to enter the second and fifth caracter of my password, and seventh and ninth digit from the login number. These are surely hashed in the database! (Metro Bank UK) not banking with them anymore.