I would expect banks to allow more than a case-insensitive password of no longer than 8 letters and numbers (only) too.

It's kind of a sad state...