My bank limits me to 8 alphanumeric for online access. It's pretty pathetic.

On the plus side, it's shorter than any of my other common passwords, so I'm not tempted to reuse it. I can say with certainty that my banking password is not in any DB on the tubes save my bank's.