My bank's security is a password that is a maximum of 8 characters, no symbols allowed. Seems rigorous.