3 ms·
A hashed (and for correctness, salted) password will always have the same number of characters output from the hash whether the input password has one, ten, six
by inetknght 5y ago
A hashed (and for correctness, salted) password will always have the same number of characters output from the hash whether the input password has one, ten, sixteen, hundred, or million characters.
Character limits are a symptom that the company wants to store some form of the password that hasn't been correctly and securely hashed.
- handrous 5y agoThey can be a defense against DOS vectors, too. Though if that's the only reason, you can usually make the limit high enough that almost no actual person will ever hit it.