After shitting the proverbial brick last week re the Apple ID/iCloud debacle, I downloaded 1Password and methodically changed the password to everything I cared

After shitting the proverbial brick last week re the Apple ID/iCloud debacle, I downloaded 1Password and methodically changed the password to everything I cared about with a randomly generated string that included non-alphanumeric chars. Sometimes I find this inconvenient as the integration on the iOS app is not great (unless I'm missing something), and will never improve unless Apple exposes APIs allowing deeper integration; but my current thinking is the extra security is worth it. Previously all my passwords were the same thing modulo a changing non-alphanumeric char, which I understand is dumb, but I was too lazy to change them. The aforementioned Apple incident provided the final impetus for change. Obviously, it later transpired that the breach was down to social engineering and weaknesses in human security rather than compromised passwords, so all this is moot as the best security precautions are only as strong as the weakest link in the chain. Something else I found interesting is Apple allows a max of 32 chars in their passwords. I discovered this as the password I was trying to set was significantly longer than this. Does this not suggest that the passwords are not hashed? If they were the length of password would not matter as the hash outputs are identical lengths and Apple could set the db column size accordingly.