@nixCraft Exactly, why bother with the error message when you can just use <input maxlength=20>, everybody understands that :-D (My bank did this, and only in some places, so the supposedly same password did not work.)

My favourite story though is when a public transit service changed their password policy and limited length in the login form, so I could no longer log in with long password. And the password change form was proactively removing characters which were not Czech enough, without any notice whatsoever. Completely brain-dead.