The guys who made the security for my country's state bank are completely nuts in all senses. Their internet banking password must be between 8 and 10 characters, and contain only letters and digits.
I don't think I need to stress how insanely backwards such restrictions are.
In another news, my card's password must be exactly 4 numbers. I'm pretty sure most passwords are an year, and quite possibly an year between the first half of the past century and the current.
Meanwhile, my e-mail password has... 35 characters.
The only non-public thing needed to set up the online banking account is to have that 4-number password. It's also used in their ATMs along with a 3-syllable case-insensitive password that the bank gives you. I guess they realised their passwords were weak, so they thought, "hey, let's top that up with another insecure password".
Speaking of ATMs, they run some Windows version that I believe to be between 9x and 2k, whose desktop I saw in a ATM whose software seemed to have suffered a buffer overflow (there was a command prompt window open). This doesn't reassure me that they take security seriously.
So the question is:
When asked for a weak password, in the sense that the character set and count is limited, what do you do?
I considered hashing my current password, but it would be a nuisance to generate the hash all the time. My current solution involves applying a rememberable algorithm to the aforementioned 35-character password that I use in my e-mail.
Edit: even though an answer has been accepted, you're welcome to share your thoughts.