I think the eight square boxes mean "exactly 8 characters", and the long rectangles mean "up to 8 characters".

You can tell them apart (sometimes) because "exactly 8 characters" will match if those 8 characters are re-used by someone else with a longer than 8 character password.

And the layout emphasizes the re-use, which is also shown by color coding.