I mean, 63^6 is a lot of possibilities, but just make the password longer to increase its security.

Blocking out special characters is dumb, but as others have pointed out, they’re probably not sanitizing inputs.