Max password lengths make no sense to me. > just long well randomized passwords, or more aptly, passphrases. Interesting idea. I could imagine a new password

Max password lengths make no sense to me. > just long well randomized passwords, or more aptly, passphrases. Interesting idea. I could imagine a new password prompt with an algorithm to reject passwords that were not random enough. How infuriating would that be? What would the hint message look like: "your password must contain a statistically random arrangement of characters"