Settings

Theme

BMO only uses the first six characters of your password for online banking.

5 points by ptolts · 6 comments · 1 min read


I was just using the BMO iPhone app to check my balance, when I mistyped my password. I had hit the final key too many times, but had already clicked sign in. To my surprise, I was logged in anyway. After testing in a browser I realized BMO only cares about the first six characters of your password.

Astounding.

3 threads
Mankhool

I thought that the limit WAS 6 characters from telephone banking days prior to online banking and mobile banking - a holdover. So when I set up online banking eons ago I used the same PW and was setup instantly. I take it new account setups are asking for a longer and more secure PW?

ari_elle

Sadly this is more common than you might think and also well known

  • ptoltsOP

    Really eh?

    Whats the point in the password strength meter!

    • ari_elle

      Password strength meter not only measures length, but also encourages not to use words and to mix up letters, numbers, special characters and uppercase/lowercase letters.

      Not to forget the fact that feeling safe probably is one of the biggest things the strength meter should achieve.

albumedia

Very interesting....at least it's not 4.

Keyboard Shortcuts

j
Next item
k
Previous item
o / Enter
Open selected item
?
Show this help
Esc
Close modal / clear selection