[Nogwater]

After all of this effort, they're still limiting passwords to 18 characters? Why would they do that?

[jasonj79]

I't because they are still storing passwords in cleartext... If they were hashing passwords (which is the correct way to do it) there would be no limit.

[simlevesque]

That is simply not true. I used to think the same but real world experience showed me that a lot of websites hash the passwords but they still set a limit to password length. You should read this : https://www.reddit.com/r/gfycat/comments/2m7ddd/how_does_gfy...

[jasonj79]

makes sense... hopefully this is their reason instead of the former.

[tmmm]

it doesn't actually... limit to 1k chars or something, not 20 if you worry about stuff like that.