The entire 'pin' scheme frustrates me. I've started to see it in a growing number of places as full authentication - either no password or pin accepted without the password.
5 characters with those options obviously isn't enough, but it's still better than "four digit numeric", which is also out there. That's such a small space that you can try it by hand, for god's sake.
This is the second time I've now heard of this since starting the repo. I cannot believe an online financial institution allows this.
Feel free to submit a PR if you like.
@duffn is ok if its in german?
Sure. If you could also provide a description in English as well I think that would be helpful. Here's a non-English example: https://github.com/duffn/dumb-password-rules#movistar
[1] https://en.wikipedia.org/wiki/%C3%9F