My previous bank ( ASB ) used to truncate passwords. I found out because one day I was trying to enter my password and it kept refusing it until I left off the last two characters. It turns out that they had stopped truncating or perhaps just increased the length, and so my 10 character password was just an 8 character one all along. It kind of boggles my mind that a bank would do that.