I got one of the belated FYI emails this morning as well. I then tried to reset my password again. Still no joy. Several hours later I check my email and there are 2 password reset emails. Neither link works because they've both timed out.

So I try yet again. This time I am successful, but as noted, may not use anything but letters and numbers, and they still allow a minimum of 6 characters. All my Avios are there. So... yay?