Why do websites require lengthy and complex passwords but credit cards only need a 4-number PIN?

Question

Why do websites require lengthy and complex passwords but credit cards only need a 4-number PIN?

In: Technology

Answer 1

For a 4 digit PIN there is a three in 10000 chance it will be guessed with the usual implementation. The implementation behind passwords varies but many allow you to retry without limit. Some passwords allow three tries before a block or an increasing time delay between retries.