[Spongeroberto]

If you must have a maxlength, please be sensible. I've seen plenty of sites use 12 as max length - which is really not that much.

Also, requirements to what characters must be used (at least one number, at least one upper case letter) doesn't do much to increase security I think. Just let me enter whatever I want.