&#62; There's really no point in restricting length or non-alphanumeric characters.<p>I agree, the only rationale I can think of for this is that these institutions don't want people to forget their passwords, but even then I don't understand why they would want that at the expense of security.