I recently got curious about exchanges so I found one that actually operates from within my country (Canada). I also have a bank account with one of the five major banks here.
The exchange account has large passwords, two-factor authentication through email or SMS, the option of having all email communications be encrypted with PGP, and a log of activity like which IP addresses have logged into the account.
The bank has you enter a bank card number, shows you a phrase and image you picked previously (with a message not to enter your password if you don’t recognize the phrase and image), enter your 6-character password (which if you go in through telephone banking, converts to a 6-digit password). Then if it decides you haven’t logged in from that computer before, it asks you for the answer to a verification question like your mother’s maiden name.
The bank has more backing them, but which one seems to know more about security?
