What decides the security level?

Every web page decides what level of security they wants to offer. If logging in with BankID on lower security levels you will sometimes be asked for your personal password. This can happen in situtations where we discover anything unusual with the login.