> At least there isn't a maximum size here. My bank does this, setting an maximum of 15 characters. It is an incredibly frustrating experience when I have to c

> At least there isn't a maximum size here. My bank does this, setting an maximum of 15 characters. It is an incredibly frustrating experience when I have to change my password (which I have to do every 6 months, per their "security" policy): I'm reminded of this ludicrous requirement of < 16 chars because most certainly they store these passwords in plain text. For context: this is the largest private bank in my country serving 50 million+ of customers.