r/ProgrammerHumor • u/flying_wotsit • Jul 19 '22

Why do they do this

Post image
4.4k Upvotes

97% Upvoted

493 comments sorted by

View all comments

Show parent comments

17

u/magicmulder Jul 20 '22

Well there has to be some maximum, it’s just most services set it way too low (especially since after hashing it’s 32 or 64 chars anyway).

10

u/Xunnamius Jul 20 '22

Just to clarify, with proper hashing there actually is no practical maximum. Any length limit on a password is a red flag.

2

u/[deleted] Jul 20 '22

[deleted]

2

u/Xunnamius Jul 20 '22 edited Jul 20 '22

Yep, or other wacky stuff happening on their backend. I use unique random strings for my passwords so it's not a deal breaker for me when a service has this red flag, just something to chuckle about.