I agree. Banking login options are far from the most secure. My phpBB login passwords are much, much more secure than my banking.

I just went to send a web-form email to my bank about it, and got this error:

> Input contains invalid characters. e.g. angle bracket, quotes, slashes, semicolon.

If a web form doesn't allow basic punctuation, I don't hold out much hope for a two-factor authentication system.