I'm not particularly well versed in IT security so please bear with me.
I recently discovered that my bank's online system will accept passwords that consist of the correct password, and a string of random characters. So for example, if my password is "password", it will accept things like "password1" or "password43435". I'm fairly sure this shouldn't happen with any sort of hashing + salt method, or even a string comparison. It's making me worried that it's just horribly insecure, so I'm wondering if there's any secure method for storing passwords that allows things like this to happen. And if not, can anyone explain how things like this happen?