My bank allows arbitrary length, but enforces certain special characters while disallowing others. Which means I can't use the (long and secure) password and have to write it down.

Not sure what they hope to accomplish.