I'm using the devise plugin for rails which seemed to be the most popular choice at the time. (https://github.com/plataformatec/devise https://github.com/plataf

I'm using the devise plugin for rails which seemed to be the most popular choice at the time. (https://github.com/plataformatec/devise https://github.com/plataformatec/devise) I've pretty much just gone for the default settings, which I'm guessing must include a limit on the length of the password. The password is definitely hashed in the database though. (Thanks for the all feedback you are giving too btw =)