Password shenanigans.
I can pay the bill for my TMS provider online, which is great, but the account setup procedure is the worst:
• limited to 6–15 characters
• case-insensitive
• doesn't allow non-alphanumerics
• ... but never reveals this fact
• though leaving the password blank shows an error message, any amount of text is accepted
• but on submitting it hangs indefinitely!
At least it didn't set up the account with a password I couldn't enter! In fact, it didn't set anything up at all and I had to re-enter all the info and guess at password limitations until it took one.
But it must be secure; it has a Google reCaptcha! *bangs head on desk until the Internet breaks*