Can you be any more condescending? Op has a point, it is not ideal to have the same community on different instances. There is no need to be a dick about it.

Even if they somehow manage to secure the password properly while still being able to know a specific character from that password, having support staff handle that information directly seems very very fishy. All in all, it doesn’t speak for their security practices. Even if they have sone form of protection for the specific characters stored separately, it would reduce the overall security because parts of your passwords are more easily guessable. In the worst case they simple store your pw in plain text and on top of that they might supply that information to the support staff.

Did you have to give those characters directly to the support staff?