I have a feeling that some old bank software has fixed size fields and that's we get ridiculous maximum lengths on bank passwords.