Obviously they don't want you to actually be able to remember whatever obscenely contorted gibberish you were forced to enter in there.
Obviously, you don't know what a good password is. And I even bet that you use one password for several websites. If you can't remember your passwords, use a password manager- Those even have nice functions like generating long, random passwords, which are pretty safe.
As for your question, there's a difference between normalizing and limting. With normalizing, you just can amplify the entire waveform so the loudest "peak" will be as loud as possible, but if you have one such peak in your file and the rest is pretty quiet, it *will* stay quiet. You can't normalize modules as they are not streams, but you can render your tunes to .WAV files and normalize those (e.g. using Audacity). If this is still not enough, you can try a limit plug-in, but beware - it will kill dynamics (i.e. loud drum hits) and touch the waveform in a very bad way if you do it wrong.