Only one in 20 debit card users change their PIN, but of those that do, 12 percent choose 1234, and 7 percent chose one digit repeated four times.