Marcus login problem

RedImp_2

I’ve only got a small amount left in Marcus but wondered if anyone else has had problems logging in.
I noticed trying to log in to the app was telling me E-mail/password invalid so just thought absentmindedly I had changed it (!).  But logging on via PC were the password etc. is stored is giving me the same message.  Will go through reset process but I don’t recall seeing anything where they are enforcing changes or anything 

RedImp_2

Okay so going through password reset message is password not strong enough so presumably is why but would be nice to be told your password was going to be disabled.

fwor

It's not an easy one to solve, because if they have detected that your password is not strong enough, the last thing they want to do for any potential attackers that might be trying to brute force their way into your account is to tell them that they believe your password is not strong enough! Simply locking the account is probably the best that they can do, in terms of keeping the money in your account safe.

mebu60

Or invoke a password change process the next time login is attempted from a device with their cookies on. 
With a pop-up defining minimum standard for new password.

fwor

mebu60 said:

Or invoke a password change process the next time login is attempted from a device with their cookies on. 
With a pop-up defining minimum standard for new password.

They may be ultra-cautious of that because of the gym-theft case a few months ago, where it became apparent that many users set their phone to preview a text even with the screen locked. The exploit there was to steal a phone and initiate a password change so quickly that it was completed (via the text preview weakness) even before the owner knew their phone had been nicked.