Those sites are probably storing it in plaintext instead of hashing it like they're supposed to, and so they set upper char limits. That makes it worse.