I have frequently bumped into this issue: sites ask for my password (e.g. Stack Exchange itself) when I want to do something like updating my profile.
This is per se a low priority site for me so I use my weakest password in mind that fits the minimum requirements. The event (profile update) is also rare so I forget my password completely.
I then face the issue of not being able to login then go to the password reset screen where the criteria are written black and white. After that I return to the login screen and enter the correct password.
The question is not whether or not I am a moron but why the criteria are not shown when I mess up my password for the first time.
An example to weakest password:
- Anything is permitted: dodge
- Uppercase and lowercase needed: Dodge
- At least 8 characters and uppercase: Dodgerman
- At least 8 + uppercase & number needed: Dodge1014