When people make excuses like "engineering time to overhaul the database" I'm slightly aghast. They should only need to store a hashed password (of whatever le

When people make excuses like "engineering time to overhaul the database" I'm slightly aghast. They should only need to store a hashed password (of whatever length they like). The actual length of my password shouldn't matter because it shouldn't be stored. Expanding the forms to go from 16 characters to 160 characters should not incur a storage problem. If that is an issue, they have bigger problems than only allowing 16 characters.