Here is the password policy for American Express’ web site:
Your Password should:
- Contain 6 to 8 characters – at least one letter and one number (not case sensitive)
- Contain no spaces or special characters (e.g., &, >, *, $, @)
- Be different from your User ID and your last Password
Max 8 characters with no non-alphanumeric characters?!?! Are they freaking joking? Sadly not….
Please American Express: give me the option of having a secure password.
BTW: Actually finding the ‘change your password’ link on their site is an exercise in futility.