Sadly, if the limit is 8 characters, they might be using something like the original DES provided by crypt()[1], it silently truncated to 8 characters. Or they

Sadly, if the limit is 8 characters, they might be using something like the original DES provided by crypt()[1], it silently truncated to 8 characters. Or they may have moved on to something newer by now on the backend, but have the 8 character limit hardcoded in a bunch of places. [1] https://en.wikipedia.org/wiki/Crypt_(C)#Traditional_DES-based_scheme https://en.wikipedia.org/wiki/Crypt_(C)#Traditional_DES-base...