Why are password requirements hidden?
If you want 8-16 letters, 15-56 non repeating alphanumeric characters plus a limerick, or 512-1024 bits of noise from /dev/urandom, please say so.
Don't have me waste 10 minutes trying passwords because I'll just go use another service.