My bank (BNP Paribas in France) has an even worse policy: 6 digits. No more, no less. They try to prevent phishing attempts with mouse-based PIN entry, require

My bank (BNP Paribas in France) has an even worse policy: 6 digits. No more, no less. They try to prevent phishing attempts with mouse-based PIN entry, require you to change the password every so many logins, but the fact remains: there are only one million possible combinations.