4 ms·

My bank (TD Canada) used to have this policy. Luckily it changed. However, they didn't tell me (or anyone) so I've been telling everyone I know to update their

My bank (TD Canada) used to have this policy. Luckily it changed. However, they didn't tell me (or anyone) so I've been telling everyone I know to update their password to be longer.

abdullahkhalids 12y ago
Thanks for the tip. I almost refused their online banking service because of the short password length.
randlet 12y ago
TD's password is still HORRIBLE. It is case insensitive and ignores anything after the first 8 characters and doesn't allow special characters. If my password is "aBc123De" I can log in by entering the password "ABC123DEFOOBARBAZ".
- jrockway 12y ago
  Better than idiotic websites that enforce their character length limit on the client, but not on all pages on the client. So you can change your password to 123456789, but the login page will truncate it to 12345678
- dougedey 12y ago
  I just tested this, it is case sensitive and it doesn't ignore things after 8 characters. I'm using TD Canada, not sure if they've maybe updated since you tried?
  - randlet 12y ago
    Strange. I tried just this morning before posting but I will update my password and try again. edit: after updating my password it's now case sensitive, and allows special chars. As the sibling comment suggests, it looks like they have two different authentication routes and updating your password moves you onto the newer one.
- johnbellone 12y ago
  Perhaps this[1] has something to do with it? [1]: http://stackoverflow.com/questions/2179649/are-passwords-on-modern-unix-linux-systems-still-limited-to-8-characters http://stackoverflow.com/questions/2179649/are-passwords-on-...
- etimberg 12y ago
  I tried it with a new password today. The requirements were between 8 an 32 characters and some special characters allowed. I just tried with all lower case letters and it rejected it. Prior to changing my password however, I experienced everything you described. They must have 2 systems and setting a new password must switch you to the new system. Can't fathom why they don't just mandate everyone changing their passwords.
  - randlet 12y ago
    Yup this appears to be it. I just changed my password and can now use a longer password with special chars (no spaces though).
etimberg 12y ago
I didn't know they changed their policy, so thanks :). Their old policy stripped out capital letters too which made it even less secure. Sadly it still doesn't allow all special characters, but it's a start.

My bank (TD Canada) used to have this policy. Luckily it changed. However, they didn't tell me (or anyone) so I've been telling everyone I know to update their password to be longer.

abdullahkhalids 12y ago

Thanks for the tip. I almost refused their online banking service because of the short password length.

randlet 12y ago

TD's password is still HORRIBLE. It is case insensitive and ignores anything after the first 8 characters and doesn't allow special characters. If my password is "aBc123De" I can log in by entering the password "ABC123DEFOOBARBAZ".

jrockway 12y ago
Better than idiotic websites that enforce their character length limit on the client, but not on all pages on the client. So you can change your password to 123456789, but the login page will truncate it to 12345678
dougedey 12y ago
I just tested this, it is case sensitive and it doesn't ignore things after 8 characters. I'm using TD Canada, not sure if they've maybe updated since you tried?
- randlet 12y ago
  Strange. I tried just this morning before posting but I will update my password and try again. edit: after updating my password it's now case sensitive, and allows special chars. As the sibling comment suggests, it looks like they have two different authentication routes and updating your password moves you onto the newer one.
johnbellone 12y ago
Perhaps this[1] has something to do with it? [1]: http://stackoverflow.com/questions/2179649/are-passwords-on-modern-unix-linux-systems-still-limited-to-8-characters http://stackoverflow.com/questions/2179649/are-passwords-on-...
etimberg 12y ago
I tried it with a new password today. The requirements were between 8 an 32 characters and some special characters allowed. I just tried with all lower case letters and it rejected it. Prior to changing my password however, I experienced everything you described. They must have 2 systems and setting a new password must switch you to the new system. Can't fathom why they don't just mandate everyone changing their passwords.
- randlet 12y ago
  Yup this appears to be it. I just changed my password and can now use a longer password with special chars (no spaces though).

etimberg 12y ago

I didn't know they changed their policy, so thanks :). Their old policy stripped out capital letters too which made it even less secure. Sadly it still doesn't allow all special characters, but it's a start.