This was too good to pass up.

Please should be clearer.
The message (for the reset password page) was supposed to let you know that the password could only have alphanumeric characters, characters from a to z (upper or lowercase) or 0 to 9. For non-techie people, the term alphanumeric wouldn’t ring too many bells, so the message should’ve explained the term.
The security of a password which allows only alphanumeric characters is a whole other can of night crawlers.