I have just registered on a site that will allow me to order repeat prescriptions online.
I was given a form with some security information I needed in order to access the site. This consisted of a 6 digit PIN no, 3 digit Practice Number, 4 digit Access ID and a 10 digit NHS number. The process of registration involved creating an 8 digit Password, a security question about my favourite Pop Star and a 10 digit user ID.
The form advises me that I should not have this information written down in an identifiable format and that the registration form should be destroyed.
This is a total of 41 digits plus the security question and password.
Simple really.