3 ms·

Ask HN: Why are the apple id passwords limited to a max amount of 63 chars?

2 points by davidpelayo 6y ago

I spent yesterday some time rotating my passwords and I found out that the Apple Id passwords are limited to 63 characters maximum. Googling, I found nothing about this topic. Then I went to the Apple StackExchange (probably not the right place) to ask about it without success (https://apple.stackexchange.com/q/387364/263000). I'd like to see the potential technical reasons why a company would go for such design - rather than needing anyone from Apple sharing such internal details (as the guy at StackExchange replied). Thanks!

Someone 6y ago
It’s prudent to have some limit, to protect against long password DoS attacks (https://www.acunetix.com/vulnerabilities/web/long-password-denial-of-service/ https://www.acunetix.com/vulnerabilities/web/long-password-d...). 63 is such a limit and long enough to allow users to pick secure passwords.