While there are still plenty of sites out there with absurd password requirements, I believe this particular example is outdated. When I used it last year, US

While there are still plenty of sites out there with absurd password requirements, I believe this particular example is outdated. When I used it last year, US Global Entry had changed over to the login.gov authentication service. The new rules are “It must be at least 12 characters long and not be a commonly used password. That’s it!” https://login.gov/assets/img/help/4-choose-a-password.png https://login.gov/assets/img/help/4-choose-a-password.png (Login.gov implements the relatively recent NIST 800-63 standard, which prohibits a lot of the earlier password absurdity.)