I can beat that, actually. The administrator passwords on the catalog system at my local university library in the 90s were required to be exactly 5 uppercase

I can beat that, actually. The administrator passwords on the catalog system at my local university library in the 90s were required to be exactly 5 uppercase letters, and were hashed with crypt() and stored in an unshadowed file.