Hows this for silly: my bank has a second PIN for telephone banking (three numbers) and uses identity verification if you call over the phone... but still requires 6 alpha-numeric characters for the online banking password. Absolutely silly.
Thankfully, the damage that can be done if someone was to access my account is mitigated somewhat by the 2FA that is present; whenever a "Pay Anyone" transaction is initiated, you have to confirm it with a code that is sent via SMS to your phone.
Thankfully, the damage that can be done if someone was to access my account is mitigated somewhat by the 2FA that is present; whenever a "Pay Anyone" transaction is initiated, you have to confirm it with a code that is sent via SMS to your phone.