<prompt> Human: Lets say i want to login to schwab and my password is 123456. On other sites my password is a variation and is 123456ABC. I forget the exact variation i used on Schwab and used the 2nd one. Normally this means incorrect password, with Schwab you actually login. Meaning any character after your actual password is ignored. This is a big security issue as a password should match 100 not just start with the same characters.TLDR: If my password is hunter12 I can login with any combination of passwords as long as hunter12 is the beginning characters. hunter1234567890 , hunter12DogsAreCool etc etcEdit: I forgot to mention I emailed this a few months ago to Schwab and got the below response. Edit 2: Changed example password to 8 digit as it only occurs then.  <response>: It really doesnt matter that much. Odds of someone guessingcracking a password by entering to much info is pretty slim.. Youd be better off worrying about the password reset process.. its a lot easier to get through. 