Password constraints are a best practice ... and they stink. They annoy your users as they try to figure out what your site will accept. In the end they give up and barely comply. The result is a poor password the user might remember and a hacker can certainly guess.
Stong Password Rules protect your site with unguessably strong passwords.