> My guess is it is stored as a string in a database as a fixed length char field This is exactly why I treat sites that have password length restrictions with

> My guess is it is stored as a string in a database as a fixed length char field This is exactly why I treat sites that have password length restrictions with extreme caution, preferring to stay away altogether 99% of the time.