4 ms·
Why an arbitrary 100-200 character limit? "I still think that the standard should just become a 8-16 characters password limit with no other restriction."
by jsprogrammer 12y ago
Why an arbitrary 100-200 character limit?
"I still think that the standard should just become a 8-16 characters password limit with no other restriction."
- Dylan16807 12y agoAnything much over a kilobyte has zero benefit and has potential to cause issues or slowdowns when shoved through a path that expects a short string. It's very doubtful you'd type such a crazy-long password by hand, and if you have a password manager there's absolutely no reason to go beyond something like 256 bits of noise encoded as hex.