If a website has weird restrictions on passwords such as banning quotes, dashes, quotation marks, or semi-colons, or if your password can't contain certain words such as select, be worried. They're either applying injection protections on fields that won't be stored in a database (which is inept) or they're applying injection protections on your password because they're storing it in the clear (which is exceedingly dangerous).
@lenaoflune you have definitely struck a chord with me on this one. When a website won't let me use special characters in my password, often I will bail. But sometimes it will be a medical site I NEED to access! 
@lenaoflune YES. And often when I tell people that, the response is "they are a big company I'm sure they know what they are doing." 😞
@Mshockley Healthcare and retail are two of the worst offending verticals in this regard... and healthcare really, really ought to know better by now 🙄
#infosec