Update: American Express has silently updated their authentication system. While the new criteria for passwords is an improvement, it is still far from perfect: Must be different from your User ID Must contain 8 to 20 characters, including one letter and number May include the following characters: %,&, _, ?, #, =, - Your new password cannot have any spaces and will not be case sensitive.

Update: American Express has silently updated their authentication system. While the new criteria for passwords is an improvement, it is still far from perfect:

  • Must be different from your User ID
  • Must contain 8 to 20 characters, including one letter and number
  • May include the following characters: %,&, _, ?, #, =, -
  • Your new password cannot have any spaces and will not be case sensitive.
#amex#infosec#p0wned