My bank password is 4 digits. But they ask another, one shot 4 digit password from a table they've sent to you when you actually move money. I thought all banks did this?
I don't know how they uniquely identify your system, but the technology is Java-based.