Until relatively recently, they silently truncated the password that literally protected your bank account to 8 characters.