I will personally email these sites and let them know how many people want these password policies fixed, along with links to articles and more information showing how insecure their current practices are. Please add in any other sites you use regularly that you want to see changed.

Most Wanted

Site / URL Type Votes
View all 1126 sites in the list... Add another site
American Express Financial 387 vote up
Disallowed characters: (space)! " # $ % & ' ( ) * + , - . / : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` { | } ~
Length: 6 - 8 Show Policy
get an email update

ING Direct Financial 347 vote up
Disallowed characters: (space)! " # $ % & ' ( ) * + , - . / : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~
Length: 6 - 10 Show Policy
get an email update

Chase Financial 243 vote up
Disallowed characters: (space)! " # $ % & ' ( ) * + , - . / : ; < = > ? @ [ \ ] ^ _ ` { | } ~
Length: 7 - 32 Show Policy
get an email update

Bank of America Financial 207 vote up
Disallowed characters: (space)! " # $ % & ' ( ) * + , - . / : ; < = > ? @ [ \ ] ^ _ ` { | } ~
Length: 4 - 8 Show Policy
get an email update

Delta Air Lines Shopping 169 vote up
Disallowed characters: (space)! " # $ % & ' ( ) * + , - . / : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v w x y z { | } ~
Length: 4 - 4 Show Policy
get an email update

Can you really trust a business that can't handle punctuation in a password?

Google, MSN, Facebook, Twitter - They all already allow you to use anything you want for your password. There is no reason to restrict what characters you can use in a password. If a site claims that it is impossible to allow any character in a password, then their software is probably insecure.