Upon resetting my password for UKC using the forgotten password linkĀ it specifies that the new password is a maximum of 15 characters. If I use something longer than 15 characters it will accept the password but appears to truncate it to 15 characters. This means I can't log in with the password I used.
It should notify the user and reject passwords that do not meet specifications instead of accepting but then silently truncating.