Password Requirements by Site — Banks, Social, Gaming, Work
Different platforms have different password rules. This guide documents minimum and maximum lengths, allowed characters, and special requirements for popular banking, social media, gaming, email, and enterprise platforms.
Banking & Financial
Banking sites often have more restrictive requirements than other services — some cap password lengths surprisingly low. Always use the maximum allowed length and avoid reusing financial passwords anywhere else.
| Platform | Min Length | Max Length | Symbols Allowed | Notes |
|---|---|---|---|---|
| Chase | 8 | 32 | Most symbols | Cannot start/end with a space |
| Bank of America | 8 | 20 | Partial | Limited symbol set |
| Wells Fargo | 8 | 14 | Yes | Low max length — use all symbols |
| PayPal | 8 | 20 | Yes | Must include letters and numbers |
| Venmo | 8 | 20 | Yes | Standard requirements |
| Coinbase | 8 | 128 | Yes | Strong policy — use 20+ chars |
Note: Bank password policies change frequently. Verify current requirements in your account security settings.
Social Media
| Platform | Min Length | Max Length | Symbols Allowed | Notes |
|---|---|---|---|---|
| Google / Gmail | 8 | 100 | Yes | Full ASCII — use 16+ chars |
| 6 | ~200 | Yes | Low minimum — choose 16+ | |
| 6 | ~200 | Yes | Shares policy with Facebook | |
| X (Twitter) | 8 | ~64 | Yes | Standard ASCII symbols |
| 6 | ~200 | Yes | Use 16+ for business accounts | |
| TikTok | 8 | 20 | Yes | Moderate max length |
| 8 | ~200 | Yes | Generous policy |
Gaming
| Platform | Min Length | Max Length | Symbols Allowed | Notes |
|---|---|---|---|---|
| Steam | 8 | Not disclosed | Yes | Enable Steam Guard Mobile |
| PlayStation Network | 8 | 128 | Most | Enable 2-Step Verification |
| Xbox / Microsoft | 8 | ~127 | Yes | Part of Microsoft Account |
| Epic Games | 7 | ~200 | Yes | Enable 2FA |
| Battle.net | 8 | ~16 | Yes | Moderate max — use full length |
| Nintendo | 8 | ~128 | Yes | Enable 2-Step Verification |
Email Providers
| Platform | Min Length | Max Length | Symbols Allowed | Notes |
|---|---|---|---|---|
| Gmail | 8 | 100 | Yes | Use a 16+ char unique password |
| Outlook / Hotmail | 8 | ~127 | Yes | Part of Microsoft Account |
| Yahoo Mail | 8 | ~32 | Partial | Some symbols restricted |
| ProtonMail | 8 | ~128 | Yes | Strong security culture |
| Apple ID | 8 | ~128 | Yes | Must include uppercase + number |
Work / Enterprise
| Platform | Min Length | Max Length | Symbols Allowed | Notes |
|---|---|---|---|---|
| Microsoft 365 | 8 | 256 | Yes | Admin-configurable policy |
| Google Workspace | 8 | 100 | Yes | Admin-configurable |
| Salesforce | 8 | ~16K | Yes | Complexity rules enforced |
| GitHub | 8 | ~72 | Yes | Use SSH keys or tokens for API |
| AWS Console | 8 | 128 | Yes | Enable MFA — critical |
| Okta | 8 | ~100 | Yes | Admin-configurable complexity |
Generate a password that fits any requirement
Set length, choose character types, and get a compliant password instantly.
Open Password Generator →More password security guides
- How to Create a Strong Password — Complete Guide
- 50 Most Common Weak Passwords in 2026
- Password Security Checklist
Put requirements into practice: generate a compliant password or check an existing one.