ING Sharebuilder Goes to Weaker Password Policy

ING Sharebuilder has elected to not allow customers to create passwords with special characters. Formerly, it was possible to use special characters, and if your password had special characters before they changed the policy, it would still work with the existing policy, but no new passwords are allowed to have special characters.

Curious, that a financial company that is exclusively web based would choose a standard lower than a previous choice. It’s not as if they ever required customers to use special characters, but they had the option. Now they don’t.

ING, step up to the security plate and bring back special characters. It just doesn’t feel as safe as it did before.

Update 8/4: A response to this question from ING simply spun the request back on its head, saying “We know our new password requirements may be an inconvenience, but we believe your personal data is safer as a result.” Well, it’s not safer, it’s less safe. Further, they pushed a software package called Trusteer, free, as an additional way of securing transactions. You can find out more about Trusteer here.

Brian@DT