Virgin credit cards must want their customers data to be hackable. You can only have a six letter, single case password, with no symbols. To make things worse, they disable keyboard input and force you to use a virtual keyboard. Keystroke loggers quickly figured out how to defeat [virtual keyboards], and they must be hell for people with disabilities.
A certain large bank in Australia has restrictions on how complex your password can be. I was shocked to find out the you couldn't include symbols or accented letters in your password. I wonder if they do this to ensure that they CAN break your password, in case they decide they need it. Up to this point, I've only found banks to specify a minimum password complexity, not a maximum.
It's always nice when they give an example of a good password. Guess what I changed my password to?