Schwab password policies and two factor authentication
Quite shameful. Fortunately, I only use Schwab because of their awesome checking account that covers ATM fees. Definitely won't put more of my assets in there until they get their act together.<p>I may be wrong, but I think user IDs can be longer than 8 characters too which makes this all even worse.<p>LinkedIn did something similar with having to append your auth token to the end of your password, but they actually checked the token AFAIK.