Last week, I tried to register for a service and was really surprised by a password limit of 16 characters. Why on earth yould you impose such strict limits? Never heard of correct horse battery staple?
And (at least at the time of my account creation) don't even tell you about it.
I found out by the errormessage in the networklog of the REST requests why my signup failed repeately.