MyGov email me to let me know I’ll need to change my password next time I log in.

That’s not how security works but sure.

Your password can not exceed 64 characters

You’re storing passwords in plain text, aren’t you?

Your password can only contain a subset of special characters

You’re not confident you are escaping SQL queries correctly, are you?