Last week, I tried to register for a service and was really surprised by a password limit of 16 characters. Why on earth yould you impose such strict limits? Never heard of correct horse battery staple?
6 points
hashed, which means they take up a fixed size
One would hope so anyway,
you should have form upload size limits
The above conflicts directly with OP’s Accept any utf8 string
5 points
3 points
If you aren’t required to use an upload manager, are you really setting a solid password :thinking:
4 points
3 points
*