So: do I make my passwords less secure and easier to enter on a nerfed keyboard?
Avoiding this pain has been the strongest motivation for me to explore password managers.
Passwords for more sensitive sites, like banking, should be longer of course, 20 characters gives you 119 bits, 30 characters gives you 178 bits.
It took them years before they finally listened to reason and allowed you to have a stronger password
To log in to the site I have to supply my login/password, then on the next page my 4 digit pin, then on the next page the answer to one of three rotating security questions.
On the phone app, after the phone was authenticated the first time, I only have to enter my 4 digit pin to access my account. IIRC, that policy is at my option.
I'm not sure if that's all a good thing, or theater, but that's what they have.
Unless you're dealing with stupid site that knows better how
your password should look like. Then you're out of luck.