Last week, I tried to register for a service and was really surprised by a password limit of 16 characters. Why on earth yould you impose such strict limits? Never heard of correct horse battery staple?
My current employer has the dumbest restrictions for passwords to our core system. It is a large regional bank. Our core system must have a password that is either 7 or 8 characters long (nothing shorter or longer). It cannot have any vowels or special characters. It cannot have any capital letters. It cannot have two numbers in a row.
Yeah but then you gotta change it every 30 days and it can't use any of your last 24 passwords so you can't even cycle through 10 numbers in one spot or even two spots. So you'd have to do like "p0s0w0rd" and then do "p1s0w0rd" and so forth.