I have literally had financial institutions reject my password for being "too long" or containing "wrong special characters". Quite recently, my bank site was

I have literally had financial institutions reject my password for being "too long" or containing "wrong special characters". Quite recently, my bank site was having a fit and I couldn't log in, with only cryptic errors. The first line of help didn't understand a thing and wrote back to IT to find out more. Apparently if you don't hand type / PW manager autotype your password, you are a hacker now; they are actively hostile towards PW managers. Great yet incomprehensible way to push people towards bad passwords. This was at a small bank that uses third party software, also used at another small bank I use. So it will have propagated to who knows where overnight. Now we want to get rid of passwords altogether, so phishing is a simple as [remotely] watching someone distracted unlocking their phone in the coffee shop, and there is a good chance you can get them to swipe right when they should go left. Idiocracy.