That is criminally poor. The most likely point of failure in most bank accounts nowadays is not the bank, it's the online banking portal. 8 characters is stupidly poor for potentially complete access to your bank account.

I hope they insist you use one of those card readers too.