Every once in a while I come across a website worthy of registering to. Recently, mint.com has been that website. The web application seemed very sturdy, useful, and Web 2.0 at first glance -- even in the beta version. At least that was my belief before discovering the first -- but only -- bug that I could find. The bug was a problem concerning password length and the limitations the site imposes on the user's choice to use a long password. Currently, the site imposes a 16 character password limit. This limit is a little rediculous by itself but is made even worse by the fact that the password input field on the main page allows you to enter as many characters as you wish whereas the others do not. Imagine registering with a 32+ character password where the input field is limited to 16 characters. In this case, you can type all day but only the 16 first characters will be used as your password. This does not upset me in most cases but I've seen it happen more often than not that the login password fields do NOT limit the input to 16 characters. At this point I rarely even realize that I'm not using my full password, and either way, even if I was aware I probably wouldn't remember how many characters to use anyway. This leads to the problem of trying to figure out what my password is by resetting it, and then having the same problem occur the next time I try to login. It's frustrating and completely unneeded. The hassle of trying to figure out the password is annoying enough but adding the additional lack of security on top of that makes things even worse -- especially when it is a financial institution you are dealing with.