You can use arrow keys to navigate in the map.
It would help the users but not the ones that try to hack the acc
It WOULD make it easier for a hacker, because brute forcing is way faster and simpler if you know the rules for the password.
A hacker nowadays would first try to make an acc to see what the password rules are and then start the hacking
With the clue on the login page he would at maximum have an advantage of a few minutes (so it can be ignored)
Websites shouldn't have rules on their passwords beyond a minimum and (large) maximum length. They should allow users to use any Unicode character they want.
> what we needed to do to a normal password to make it work on their site.
You shouldn't grab a base password and change it slightly to fit the website's rules because an attacker that knows your base password (e.g. another site you registered with it) could use it to gain access to other sites.
You shouldn't... but you can.