DFR is an online retailer that sells picture frames The software running on DFR's website enables customers to log in and make purchases by inputting an email address as a user name and a password that must contain at least eight characters, including upper and lower case letters, numbers and punctuation marks (e.g. £, $ or!) Once logged in, customers can check previous orders that they have placed.
Customers can also use DFR's website to change personal details, including credit card numbers and delivery addresses Whenever they wish to use those facilities, the software sends a text message containing a six-digit number to their mobile phones They must input that number before the system will accept changes to their personal details Which TWO of the following statements are correct?