The EXACTLY 8 characters worries me, because it suggests that they are storing the password in plaintext in an 8 character column.