A university I worked at had a similar policy to the first one.

They wanted a single username and sign on across all IT systems but also had some really old legacy systems that didn’t support long passwords.

So they’d force everyone to use passwords that were exactly as long as the maximum legacy password length.

For me, the worst system is the Microsoft authenticator which locks me out my account for five minutes if my fingerprint doesn’t match the first time I try.

I think the easiest way to describe how it feels is it is like having a tooth taken out.

You’ve had it removed because the pain is too much, and now finally that pain is gone, but instead you’re sat there feeling puffy and swollen from the recent trauma, and you’re just constantly aware of this gap where there used to be something present.

Just like going to the dentist, it gets better though. And I’d do it again in a heart beat if I had to make the same decision.