BMO only uses the first six characters of your password for online banking.

https://news.ycombinator.com/item?id=4699304

by ptolts • 14 years ago

5 6 14 years ago

news.ycombinator.com

I was just using the BMO iPhone app to check my balance, when I mistyped my password. I had hit the final key too many times, but had already clicked sign in. To my surprise, I was logged in anyway. After testing in a browser I realized BMO only cares about the first six characters of your password.

Astounding.

ari_elle2• 14 years ago

Sadly this is more common than you might think and also well known

ptolts2• 14 years ago

Really eh?

Whats the point in the password strength meter!

ari_elle2• 14 years ago

Password strength meter not only measures length, but also encourages not to use words and to mix up letters, numbers, special characters and uppercase/lowercase letters.

Not to forget the fact that feeling safe probably is one of the biggest things the strength meter should achieve.

albumedia• 14 years ago

Very interesting....at least it's not 4.

ptolts2• 14 years ago

Yeah! I've unchecked "Save my card number"

Mankhool• 14 years ago

I thought that the limit WAS 6 characters from telephone banking days prior to online banking and mobile banking - a holdover. So when I set up online banking eons ago I used the same PW and was setup instantly. I take it new account setups are asking for a longer and more secure PW?

BMO only uses the first six characters of your password for online banking.

Related Stories