I'm absolutely sure banks store passwords in plaintext more often than not. But then one particular bank takes the cake. There, I have: - The usual login + pas

I'm absolutely sure banks store passwords in plaintext more often than not. But then one particular bank takes the cake. There, I have: - The usual login + password, the password length is limited of course - The "secret questions" to confirm some actions. In reality these are just three extra passwords - The code generator in the mobile app to confirm some other actions, for access to which you need a 4-digit pin code Another bank is much more sensible in this regard but requires me to change my password every year. I hate it with a burning passion when there's any time component at all in user authentication.