First National Bank (FNB) in South Africa has adopted every one of these absurd rules, and more:
Passwords must contain a mixture of upper and lower case letters as well as one letter and one special character
Length between 7 and 33 characters
Not the same as the previous 12 passwords
The same character cannot be used consecutively
Avoid sequential letters and numbers (123 or abc). I think this used to be enforced, not sure if it still is.
May not be the same as the name, userid or clientid. As I recall this is enforced by very aggressively with innocent passwords being rejected because they happen to have some matching substring.
https://www.fnb.co.za/demos/reset-username-and-password-PC.h... (rules are on the 5th screen in their demo)
I've been using the same password for 3 years because changing passwords is so brutal. Complaining is futile because of the bullshit cargo culting around security.
Passwords must contain a mixture of upper and lower case letters as well as one letter and one special character
Length between 7 and 33 characters
Not the same as the previous 12 passwords
The same character cannot be used consecutively
Avoid sequential letters and numbers (123 or abc). I think this used to be enforced, not sure if it still is.
May not be the same as the name, userid or clientid. As I recall this is enforced by very aggressively with innocent passwords being rejected because they happen to have some matching substring.
https://www.fnb.co.za/demos/reset-username-and-password-PC.h... (rules are on the 5th screen in their demo)
I've been using the same password for 3 years because changing passwords is so brutal. Complaining is futile because of the bullshit cargo culting around security.