My bank has a rule that your password needs to be exactly 5 characters. It's completely nonsensical. Thankfully, a few years ago they at least implemented two factor authentication so there's some safety. Otherwise I would probably change to a different bank.