I was recently reminded of this when trying to guess my car insurance password today when their password tool reminded my that "no special characters like "!@$&" are allowed. I had a credit card company that restricted passwords to 6-8 characters with numbers and letters only...I cancelled it immediately.
My car insurance company is one of the largest in the US and they don't allow "special characters" in passwords, my former credit card company with 6-8 characters was through AmEx. How can we let it be known publicly that This is not ok?
It's already known that it's not enough. The only way for a biz to change is for enough will from their customers. IE if they get hacked and their customer info is leaked and they must save face. But given enough time, even the toughest of passwords are breakable. To my knowledge revolving passwords driven by time increments are the safest alphanumeric passwords. I vote for an app which has those built in for the consumers different passwords.