When I first started banking online with Bank of America, ten or more years ago, no choice in username existed: it was set to your Social Security Number (SSN). But that was back in the days before hackers had become proficient in stealing usernames.

While I’ve been advised to change the username a few times over the years, the bank finally laid down the law in January. I had two more logins available with my SSN, and then I was required to change. The message was delivered via splash screen after login (see #1 below).

The process was simple and took just a few seconds (screenshot #2). The bank’s interactive script helps users make good username/password choices (screenshots #3-4).

While this change isn’t likely to do anything to help the bank’s bottom line (it probably just drives up tech support calls as users adjust to their new usernames), it’s the right thing to do. Helping customers protect their own privacy should be part of every financial institution’s mission.

#1: Bank of America splash screen at login (13 Feb. 2010)

#2 Landing page after choosing “update” button above

#3 Interactive help for creating an allowed username

#4 Confirmation when all is well