@duffn Here's my suggestion for dumb password rules. Site Name: Combank Digital Page with the dumb rules: https://www.combankdigital.com/#/changePin Description: Only a staggering 8-12 characters allowed with prescribed selection of special characters.