2 ms·
Why do they need to check the length of a password before hashing when the resulting password hash will be a fixed length regardless of the length of the origin
by wlll 14y ago
Why do they need to check the length of a password before hashing when the resulting password hash will be a fixed length regardless of the length of the original password?
- frou_dh 14y agoI can imagine a thought process along the lines of: "Most people don't use password managers, so it's asking for trouble to allow extremely long passwords. 32 should be plenty, even for the security conscious minority."