<prompt> Human: Example:Your password is Hunter2You could successfully log on with HUNTer2HuNtER2hunter2HUNTER2hunteR2etc etc etc. Chase doesnt salt their passwords, so you should change your password to Hunter2!? or something like that to make sure you have an ACTUALLY somewhat complex password.  <response>: I think theres a very incorrect assumption here that passwords are the only security feature being used by financial institutions. Look up 41st Parameter, Trusteer, Trend Micro, RSA, etc. These tools are completely transparent to the user and are locationbehavioraldevice based. I test these things for a living. For example: Try logging in on a new device through a proxy server that isnt located in your home state. Try to add a bank account, perform a large trade or a large transfer. Youre either going to get flagged and locked out, or theyll ask you for more information to verify your identity. In the event of VERY large amounts of cash varies by FI youll be prompted to call a phone number to verify yourself. For those that keep insisting that someone is going to brute force your password, these same systems or even your basic account lockout prevents this. A much more efficient way of committing FI fraud in todays world is through malware, such as Dyre. Cheers! 