5 ms·
My bank issues a PIN which is not of my choosing, and since it's a smart card to change it means actually going down to the bank to select a new PIN. I think t
by furyg3 14y ago
My bank issues a PIN which is not of my choosing, and since it's a smart card to change it means actually going down to the bank to select a new PIN. I think the majority of people never do this, so it seems like a great way to counter people selecting "1234" or their birthday.
At some point I'd really like to see six to eight digit PINs, though...
- nwh 14y agoThey allow them (8+ digit PIN) in Australia, so I assume they are available elsewhere too. Parts of Europe are the exception according to my bank.
- alanctgardner2 14y agoYou can do up to 6 in Canada. Nobody ever told me, but when I was signing up at RBC I accidentally typed 5 and it worked. Now I know why they don't deterministically say 'OK, he's done' after you hit four digits.
- 3pt14159 14y agoWatch out! I also live in Canada, and a close friend of mine while travelling was frozen out of his accounts because there were no banks that could handle 6 digit pins there. For that reason I recommend having a 4 digit pin.
- dbaupp 14y agoWhere's "there"? (Presumably not Canada?)
- derpmaster 14y agoI couldn't use a 6 digit pin in Italy. Some ATMs in London,UK didn't like it either. Singapore it's mandatory for a 6 digit pin so have no idea if a 4 digit pin will work, anybody been there?
- davedx 14y agoSame here in the Netherlands. I don't think I can change mine at all. This has however resulted in me forgetting it several times, once I almost got stranded at a station and was lucky to have enough cash to buy a ticket. I won't tell you what I've done to mitigate against being stranded at random places due to forgetting my PIN but it's not secure. Therefore, I have my reservations about forcing people to remember random numbers.
- barking 14y agoSo I have 1 secret 4 digit number that I use to encrypt all my other pin numbers by adding it to them using modulo 10 addition. I then write the resultant 4 digit pin on the back of the card. I've been doing this for well over a decade since seeing it in a book about encryption. Without it I'd have needed to have been issued with new pin numbers many times
- lifeisstillgood 14y agoErrr ... You have a secret pin. You modulo that with the pin your bank gives you. You write the result on the back of the card. If you forget the pin you can work backwards to the bank issued pin? Ok I get it now. Sounds crazy.
- anonymous 14y agoOoh, that's neat. I use a similar system, though mine permits several possible ways to encrypt a number and I usually pick an encryption with 5 or 6 digits. It doesn't require me to remember anything but the algorithm, so I don't feel comfortable with sharing it. I know it might be less secure than encrypting the pin with another pin, but I can't trust myself to remember any pin.
- scoot 14y agoInteresting. If you chose a pin for your card that was the result of modulo arithmetic with some part of the card number (last four digits, for example, but perhaps something more obscure), you would have to write on the card at all.
- arrrg 14y agoMy bank (in Germany) just recently introduced a feature on their ATMs that allows you to easily change your PIN. I think it's pretty obvious that's a bad idea, given all the huge posters also hanging everywhere in the bank, sternly warning people not to pick a dumb PIN. I'm sure that'll work. 4-digit PINs are easy to remember. It's real simple to always come up with some sort of mnemonic. There is no need whatsoever to pick your own.
- nmcfarl 14y agoI disagree - with all my personal and business accounts I have around 15 pins. I of course have to write the down.
- lifeisstillgood 14y agoApparently (urban myth time) the bank issued pin is a hash of your bank account number plus some other details that are known without an expensive core database lookup. This way your pin can be verified without needing to call back to the central bank core - the ATM cloud can just move straight on to transactions. It may save a lot of cash it may be a myth - anyone got details?
- StavrosK 14y agoThe fact that you can change it disproves it.
- benvd 14y agoIf enough people never bother to change their PIN, it might still be worth it.
- StavrosK 14y agoYeah, but then you have to make the lookup anyway, to check if they did change it. You might as well just authenticate. Unless the original PIN always works, which is not secure.
- cjg 14y agoYou are both kind of right: http://en.wikipedia.org/wiki/Personal_identification_number#PIN_validation http://en.wikipedia.org/wiki/Personal_identification_number#...
- PanMan 14y agoI think the changed PIN is stored on your card as an offset. When you enter your pin, both the offset and the code you entered are transmitted, so they always validate agains the original, non changed, PIN.
- itcmcgrath 14y agoI worked at a bank, I did code for generating PINs. I can tell you the urban myth is incorrect. Perhaps a single bank did it, but it sure isn't industry standard.
- kamkha 14y agoMy Bank of America account has a six digit PIN, and it has worked at every ATM (BofA or not) I've encountered.
- LogicX 14y agoMine is a 10-digit pin, of my choosing. When dealing with 'foreign' ATMs (whether domestic or foreign), my pin is sometimes truncated -- anywhere from 8 to 4 digits. I've also come across ATMs where it won't work. Bank of America advises you to change it to a 4-digit PIN before traveling internationally (and actually have a paper handout they'll give at the teller window saying such if you tell them you're traveling internationally.
- scoot 14y ago"it seems like a great way to counter people selecting "1234" or their birthday." It would be, were it not for the fact that the pin is randomly assigned. I've had a card issued with "2468" as the pin. "I'd really like to see six to eight digit PINs, though..." Whilst the default length is 4 digits, you can change it to something longer if you choose.
- cryptoz 14y ago> Whilst the default length is 4 digits, you can change it to something longer if you choose. Not really. You'll break international standards if you do. I used an 8-digit PIN for many years, but it is 100% impossible to use anywhere I tried in Europe. You will be completely without any way to pay other than cash. No machine will allow more than 4 digits in my experience.
- flux_w42 14y agoHere in Belgium they do
- tripzilch 14y agoHow long ago was your experience? This may explain why (over the past 5-10 years or so) I've encountered more and more machines that require to press OK after entering the four digits (before, some machines would submit after you type the fourth, without confirmation).
- rodly 14y agoI had to get a new debit card relatively recently (was robbed) and it came with a 6-digit PIN not of my choosing (Bank of America). Just saying, they now exist.
- lvturner 14y agoIn China, 6 digit pins seem to be the norm - sometimes I can't take money out on my international card because my 4 digit pin is deemed by the machine as too short/invalid.