my bank did this shit to me. I finally tracked down a dev that worked on the software through LinkedIn.
I asked why the fuck does this happen. their response?
When your password expires it will give you a password invalid on login. this is the best way the software can force a password change.
I seriously wanted to hurt the guy, but realized he was just trying to deliver a feature that his boss wouldn't give him the time to fully deliver on.
now, for a moment, just imagine how many other corners were cut when your banking software was written...
