I have a small banking account at some German bank. Their 2FA basically forces you to use a weak password: if you want to log into the web interface on a deskt

I have a small banking account at some German bank. Their 2FA basically forces you to use a weak password: if you want to log into the web interface on a desktop, you get sent a code to your phone after successfully submitting your username and password. To receive the code, you must install their mobile banking app (which is something I don't want to do, but have to). If you don't use the banking app regularly your device, it won't accept biometrics to unlock it, you need to input your password into a password field, username field memorizes the username. The app does not make use of Google Smart Lock or any other means which allows you to securely store your password and easily insert it into the field, so you need to type in your 16 character upper-, lower letter, numbers and symbols-password through the popup keyboard while keeping it visible on your desktop. This really wants to make me change it to an 8 char no-symbols all-lowercase password.