So I have identity theft protection via one of the many data breaches that have happened in Canada and I just went to log in to check on a new report... this does not inspire confidence. If you're limiting the length of passwords, you're doing things very very very wrongly.