Passwords that are case-insensitive, 8 chars max, no special characters. At least it's not a financial institution. WAIT ...