You don't store the password. You store a cryptographic hash of the password, which will always be a fixed length. This makes the actual password length irrel

You don't store the password. You store a cryptographic hash of the password, which will always be a fixed length. This makes the actual password length irrelevant to back end storage.