ASB online banking passwords not case sensitive!

Please note this sub-forum does not provide professional finance advice. You should seek advice from a licensed financial advisor.

To post in this sub-forum you must have made 100 posts or have Trust status or have completed our ID Verification.

If investing please consider our affiliate link for new accounts: Sharesies.

Forums › Finance and wealth management › ASB online banking passwords not case sensitive!

insane

3242 posts

Uber Geek

ID Verified

Trusted

#140653 16-Feb-2014 17:26

Well as the title suggests, ASB online banking passwords don't seem to be case sensitive. I first noticed it when I tried to add complexity to my password, however was told I can't reuse my existing password. So I tried logging on using an incorrect password (adding upper case letters where there shouldn't be) and can happily login.

Can any other ASB customers try replicate this?

Their website says they should be... but clearly not.

"Note: Passwords must be eight to ten characters in length, are case sensitive and must contain at least two letters and two numbers."

1 | 2 | 3 | 4 | 5 | 6 | ... | 7

Hammered
8348 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#988361 16-Feb-2014 17:30

Pretty sure this has been mentioned on here before. Do a quick search for ASB Case insensitive

JamesL

956 posts

Ultimate Geek
Inactive user

#988364 16-Feb-2014 17:36

Terrible, just tried mine using all caps and logged on fine

hio77

12999 posts

Uber Geek

ID Verified

Trusted

Lizard Networks

#988367 16-Feb-2014 17:39

well.. i guess my use of caps there is a tad moot...

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

Coil

6614 posts

Uber Geek
Inactive user

#988369 16-Feb-2014 17:39

My password has lots of $ and & like symbols. luckily those dont have 2 case types!

nzkc

1573 posts

Uber Geek

#988376 16-Feb-2014 17:43

They're also restricted to 8 characters. I brought this up with them on Twitter - got nowhere with them.

Coil

6614 posts

Uber Geek
Inactive user

#988378 16-Feb-2014 17:45

nzkc: They're also restricted to 8 characters. I brought this up with them on Twitter - got nowhere with them.

Thats strange as mine is 12.

insane

3242 posts

Uber Geek

ID Verified

Trusted

#988379 16-Feb-2014 17:46

TimA:
nzkc: They're also restricted to 8 characters. I brought this up with them on Twitter - got nowhere with them.

Thats strange as mine is 12.

yeah.. try using only the first 8 and see if you get in :)

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

kyhwana2

2566 posts

Uber Geek

#988380 16-Feb-2014 17:47

Banking password security/limitations are a joke.. (Kiwibanks is 6-15..)

hio77

12999 posts

Uber Geek

ID Verified

Trusted

Lizard Networks

#988381 16-Feb-2014 17:47

insane:
TimA:
nzkc: They're also restricted to 8 characters. I brought this up with them on Twitter - got nowhere with them.

Thats strange as mine is 12.

yeah.. try using only the first 8 and see if you get in :)

that is.. rather insecure.....

on another note, any more tips to give me tim before i try? :P

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

Coil

6614 posts

Uber Geek
Inactive user

#988382 16-Feb-2014 17:49

hio77:
insane:
TimA:
nzkc: They're also restricted to 8 characters. I brought this up with them on Twitter - got nowhere with them.

Thats strange as mine is 12.

yeah.. try using only the first 8 and see if you get in :)

that is.. rather insecure.....

on another note, any more tips to give me tim before i try? :P

No i didnt lol...

JamesL

956 posts

Ultimate Geek
Inactive user

#988383 16-Feb-2014 17:50

Going to assume that the password restrictions are due to the archaic core banking systems most banks use

nzkc

1573 posts

Uber Geek

#988385 16-Feb-2014 17:51

JamesL: Going to assume that the password restrictions are due to the archaic core banking systems most banks use

Is that an acceptable reason though? I personally dont think it is.

insane

3242 posts

Uber Geek

ID Verified

Trusted

#988386 16-Feb-2014 17:51

JamesL: Going to assume that the password restrictions are due to the archaic core banking systems most banks use

ASB have no excuse, their's actually quite modern and runs on windows of all platforms...

johnr

19282 posts

Uber Geek
Inactive user

#988387 16-Feb-2014 17:51

Not even the user name is case sensitive, Wow never knew that before

JamesL

956 posts

Ultimate Geek
Inactive user

#988388 16-Feb-2014 17:53

I'm talking about password length rather than ASB's bizarre case insensitivity

Either way, it's not acceptable. The billions the rake in profits you'd think they could invest more into security.

Personally I'd like to see things like banks using OTP tokens like Google Authenticator etc

1 | 2 | 3 | 4 | 5 | 6 | ... | 7