I'm brand-new to RTM, though it's been recommended to me by many trusted friends. However, I wanted to post about something that I just went through that probably would have turned me off to the service had it not come so highly recommended:

When you set a limit on the number of characters in a site password, that limitation needs to be TOTALLY TRANSPARENT throughout your site.

I use a password archive to keep different login credentials for all my online accounts. Because I'm not remembering every password, I have no compunction about using long, complex passwords. My standard password length is 20 characters.

At RTM, you can sign up using a 20-character password. However, it would appear that something less than all 20 characters is stored, because I could not subsequently log in using the password that I had saved. I went through the password reset process, and applied a new password, thinking that through some glitch the wrong pw had been saved. Once again, I was allowed to change my password after having entered 20 characters, but couldn't log in using that password.

I went through the process once more but cut the length down to 16. Voilà.

I can't tell you how irritating this is. To a brand new user, it makes RTM look amateur. I encourage you to take a quick look at your forms, and to make sure that users are getting feedback when they enter a password which your site is incapable of handling.

Thanks.