Stupid password requirements
I work in fintech and this app showed me that there can be even dumber password requirements, such as: "can't have the same character twice in a row". What's next? "Your password must contain at least every single character of the alphabet"? Or better yet "your password must contain at least 5 Chinese or Cyrillic characters"?