Truncation means accepting the long password, but only looking at the first N chars. It is never acceptable. Max length requirements are absolutely required, bu

Truncation means accepting the long password, but only looking at the first N chars. It is never acceptable. Max length requirements are absolutely required, but they must be enforced by refusing the password, not by truncating.