My previous credit union had a default password of the last 4 of my Social Security number (the least secure digits of a completely insecure number).

You were not required to change the password before using online banking.

The maximum length of the password was 4 characters (thankfully you could use letters, numbers and special characters).