> Funny thing about the registration, passwords must be between 8 (ok) and 16 characters. Why in 2017 do we still have developers thinking that there must be an

> Funny thing about the registration, passwords must be between 8 (ok) and 16 characters. Why in 2017 do we still have developers thinking that there must be an upper limit on password length? Sorry to be pedantic - but having an upper limit makes sense - how many 10gb passwords would you want to store/run through a hash? 16 does seem a bit low though.