Our minimum used to be 15, but then they instituted 2 factor security for everything in such a way that password access is almost never used. Somewhere along the line they scaled password access back to 10 characters.
I've used multiple government websites that require 14 characters and all the other bullshit OP was asked for. You sure it's not just the agency you work for?
11
u/snowbirdie Mar 08 '16
The government mandate is a minimum of 12 characters. This website is out of compliance and should be reported. Source: work IT for government.