American Express doesn’t take security seriously

We’ve already established that when it comes to security, passwords alone are not a very good choice. Sure, they’re better than nothing, but with most people picking insecure passwords and companies saving them in unencrypted formats, there are better solutions out there.

American Express takes insecure passwords and makes them even more insecure. When registering your credit card, the site asks a series of questions including username, password, and “special question,” but the restrictions they put on the answers is downright baffling.