There's really no point in restricting length or non-alphanumeric characters. They should be storing a salted hash, not the actual passwords, so the content of the password shouldn't matter.<p>It's really just laziness and incomptence on the part of the programmers.