For many years, Schwab ignored any characters after 8 in its password. Discovered that when I knew I flubbed one of the last characters, and it still worked.

I still can't believe a major bank got away with that for so long, apparently unharmed.