Why your password can’t have symbols—or be longer than 16 characters Even a bank that limits passwords to eight characters defends itself.