This reminds me of when USAA would let you enter a longer password on the login screen than was actually possible to set, so if you generated a 14 digit password and lasted it into the password reset, it wasn’t immediately evident that it only took 12. But on login, you could enter all 14 characters and then it’d just say it’s wrong. I’m…90% sure they don’t do that anymore.

Also, KeyBank used to (or maybe still is? I closed my account years ago) not support case sensitive passwords. So whether your caps lock was on or not, or you alternated upper/lower however you wanted, your password still worked. I think they were converting to lowercase on the back end.