I had an account there with a proton email address and suddenly I couldn't log in anymore. After 6 months of calling, someone finally told me proton emails are blocked because they are not secure. So I changes it to a tutanota email

What a clusterf**k

I always get a chuckle when financial institutions have requirements like these, or lack 2FA. My Lemmy account has more security at this point.

short passwords because they are trying to save bandwidth for their next time their entire database structure is downloaded

The 20 character length limit is so annoying because I once had 2 distinct passwords (not in use anymore) that were both coincidentally 21 characters long. Character limiting me by a single character at the end of those old passwords was annoying because I usually ended up, for some services I needed, having to change up and use a completely new password. Back when I was a lot worse about reusing passwords than now.

I swear password restrictions are getting to the point where there's eventually going to only be one usable password.

At least they show you their requirements. Usually I use passwords with up to 150 characters (including special ones). Getting a vague response like "Password is invalid" is so annoying. I then have to remove special characters and reduce the length step by step until it is accepted by the website. (But 20 characters is way too short, resulting in these hilarious other requirements. You just want to create an account, without having to do a PhD in creating passwords first.)

Imagine having to contract with a company in order for them not to fuck your life up with your own data. This is ridiculous.

Correct me if I'm wrong, but the only reason to limit password length, is to save carrying cost on the database. But the only reason that this would be value added, is if the passwords are encrypted in reversible encryption, instead of hashed. Isn't this against some CISA recommendation?