All requirements for passwords are found on the websites. Somewhere through the fingers. My bank allows a password with a length of 5 characters. Somewhere they watch. The site requires a minimum of 10 characters digital password with at least two head letters and two digits.
Do criminals steal rubbish? Or are customers paying?