I regularly conduct transactions at the branch of my local bank wherein they ask me for no credentials whatsoever. I also once forgot to bring my account number with me and the teller said "no worries, I'll look it up for you." Kind of horrifying.

My bank’s password field is case insensitive. Of course they could have lowercased it before hashing but I doubt it.

Yeah I was a bit shocked... like... you're not supposed to know that!