Among the password requirements in this form, there's a minimum length of 8 characters (fine), but a maximum length of 12:
Before just dismissing this as incompetence, is there anything I'm missing here as to why this might be an even vaguely good idea?