I had something similar happen on a financial site years ago. The logon page silently truncated passwords to N characters, while the password reset page silentl

I had something similar happen on a financial site years ago. The logon page silently truncated passwords to N characters, while the password reset page silently truncated to N+1 characters. My default randomly generated password length was, of course greater than N+1.