Comment by OJFord

Banks are the last thing I'd worry about (I wouldn't) - they're highly regulated, audited, and have been dealing with this forever, since before 'passwords'.