I don't think this has anything to do with the Membership Provider. The fact that you're getting the red * from the client-side indicates this is an issue with the RegularExpressionValidator for the Password field in the page.

Could you post the page code and let us see that?