W-1 Password Protocol Inadequate | Wealth One Bank of Canada | Discussion forum

Not having logged into W-1 for some time, I logged in today to see if I still had access. I noticed my password was out of date by today's standards, so I proceeded to "update my password" for better security.

I generated a sixteen character password using upper / lowercase characters, numbers and special characters, but when I pasted the new pw into the change pw field, only eight characters appeared.

Thinking the remaining characters were kept invisible (highly unusual) I pressed the "confirm" button.

To my horrific surprise, my secure password was rejected with the following message:

You have entered an incorrect New Password. The password should contain 4-8 numbers. Please try again.

That concept has been discredited as being virtually password free, as a hacker can crack an eight number password instantly using hacker tools.

Yes, W-1 instituted two factor authentication, but the first line of defence is grossly inadequate by today's standards.

Stephen