[honoredb]

As does Citibank. I imagine it's for telling-support-over-the-phone purposes, which isn't great.

[tokenizerrr]

...why would you have to tell them your password in the first place?

[SeanLuke]

UNIX historically truncated passwords to eight characters.