[nottorp]

> another good one is regularly changing passwords

I believe someone stuck forced password changes in legal banking regulations at least in the EU. In spite of all having hardware or mobile based tokens.

Needless to say, I just increment a number 10 times, because they "prevent password reuse" as well.

[chpmrc]

I think so too. Thankfully most of them enable face/touch ID login so logging in is pretty seamless.