Note also that an enforced length limit is sometimes an externally visible code smell of not performing proper password hashing, and instead storing the plainte

Note also that an enforced length limit is sometimes an externally visible code smell of not performing proper password hashing, and instead storing the plaintext password in, i.e., a char(8) db column.