Why Canada’s banks have weaker passwords than Twitter or Google

Re:Why Canada’s banks have weaker passwords than Twitter or ... by otoburb on Sunday June 08, 2014 @03:00PM (#7865500)

Whoever gave the Globe and Mail journalist the information about TD's password restrictions didn't differentiate between TD Bank USA ("TDB") and TD CanadaTrust ("TDCT"). TDCT is the Canadian corporate entity (and parent corporation). TDB is TDCT's US banking operation.

TDB has password restrictions listed in the article (8-32 characters with some special characters). TDCT restricts one to the 8 character restriction (!), as you pointed out. EasyWeb is the name of the TDCT (Canadian) online banking site. There is no corresponding brandname for the TDB (US) online banking site.

The highly restrictive TDCT password is why I have to keep changing my TDCT password rather often compared to other online banking accounts.

[ Parent | on HN ]

Re:Why Canada’s banks have weaker passwords than Twitter or ... by MAGZine on Sunday June 08, 2014 @03:34PM (#7865604)

This is simply not true. My TDCT password is 32 characters long, and 8 of the 32 will not cut it. TDCT needs at LEAST 8 characters, one letter, one number, but no longer than 32 chars. I think some symbols are restricted.

[ Parent | on HN ]

Re:Why Canada’s banks have weaker passwords than Twitter or ... by otoburb on Sunday June 08, 2014 @05:48PM (#7866030)

I stand corrected. I just checked my "change password" option on TDCT and it now allows 8-32 characters. A year ago, this wasn't possible for my TDCT account as I distinctly remember the difference between the US and Canadian online banking experiences. I should read the fine print more often.

Thanks for calling this out.

[ Parent | on HN ]

Re:Why Canada’s banks have weaker passwords than Twitter or ... by kohanz on Sunday June 08, 2014 @09:15PM (#7866565)

Thanks for the update. As I said Unless TD recently changed their requirements, which it seems they have.

[ Parent | on HN ]