3 ms·

Or silently truncating - sure, you submitted 20 chars, but we actually only kept 16... and we won't let your password manager enter all 20...