Citibank Password Requirements and Generator

Password Rules for Citibank

  • 📏 Length: At least 10 characters
  • Uppercase letters required (A-Z)
  • Lowercase letters required (a-z)
  • Numbers required (0-9)
  • 💬 Note: Based on SiteMinder Password Services page: minimum 10 characters, at least 1 lowercase letter (a-z), at least 1 uppercase letter (A-Z), at least 1 digit (0-9). Note: An alternative Supplier Cobassessment policy exists with different requirements (min 6, max 15, letter and digit required).

Generate a Password for Citibank

Standard mixed-character password with uppercase, lowercase, numbers, and symbols.

or press Space when focused Reset to defaults

Detailed Requirements

RuleValue
Minimum Length10 characters
Uppercase RequiredYes
Lowercase RequiredYes
Numbers RequiredYes
NotesBased on SiteMinder Password Services page: minimum 10 characters, at least 1 lowercase letter (a-z), at least 1 uppercase letter (A-Z), at least 1 digit (0-9). Note: An alternative Supplier Cobassessment policy exists with different requirements (min 6, max 15, letter and digit required).
Rules last verified: May 16, 2026

Frequently Asked Questions about Citibank

What are the password requirements for Citibank?
For Citibank, passwords must be at least 10 characters, and you must include an uppercase letter, a lowercase letter, a number.
How long should my Citibank password be?
Citibank requires a minimum of 10 characters. Aim for 16+ characters for strong security.
Does Citibank allow special characters in passwords?
Citibank's symbol policy hasn't been confirmed. The generator above defaults to widely-accepted symbols like ! @ # $ % & * to maximize compatibility.
How do I generate a strong password for Citibank?
Use the password generator on this page — it's already configured to match Citibank's rules. Click "Generate Password" and copy the result. For maximum security pick a length of 16 or more.
Is the PassTailor generator safe to use for Citibank?
Yes. Passwords are generated entirely in your browser using the cryptographically secure Web Crypto API. Nothing is sent to our servers and nothing is stored.