Just pass on my tweet (or danq.me/2019/01/03/127…) to your technical team and get them to fix your password policy, because it’s really, really broken and you’re neddlessly weakening the security of you and your customers’ data as a result.