Nothing enrages me more than a password character limit. Thank you for making sure my password is LESS secure with your idiotic requirements based on security recommendations that are at least a decade old.
I've run into this where the sign-up form silently truncated the password but the login form didn't. Took me several password resets to guess the thing was being trimmed to 16 characters.