Well there are a lot of websites that have weird requirements for passwords. Such as having uppercase, or special characters or numbers in it. Steemit requires 16 characters but afaik it could be anything like words with spaces (which is easy to remember) and I know it supports up to at least 30 characters. I'm not even sure what issue she was having because its a bit confusing what her problem was exactly.
I think 16 is the bare minimum because of security issues, but maybe Steemit could suggest stuff like words with spaces, because people typically assume passwords need to be complicated these days.
example: Flipper top biggle knot booger