Allow passwords to start with a number
Until the UBank site upgrade late last year, passwords could start with a number; now they can't. I've been advised this is a technical restriction, not a security one. Secure passwords should be able to start with a number; as long as other password requirements are met.
Also, if creating a password for the first time/changing a forgotten password on the UBank site, the conditions fail to disclose the password must start with a letter; so the password might fail the test leaving the user confused as to why. Only the 'change password' page accessible to those already successfully logged in discloses that a password must begin with a letter.
While the suggestion ultimately wishes for passwords to be able to start with a number, in the mean time UBank staff can hopefully clarify the password requirements through the various change methods to accurately reflect the technical requirements with a unified requirements message.
Unfortunately we aren’t able to change the password requirements, but we are in the process of updating the error message.
I agree. Starting with a number adds to security and increases password combinations that make it more difficult for hackers. Restrictions on characters used and where they are located is old school!
Should allow characters like !@#$%&* in order to strengthen my password. Currently cannot use any of these.