Comment Comment by throwawayReply Note that bcrypt has a maximum length well below some of the lengths mentioned in this thread:https://security.stackexchange.com/questions/39849/does-bcry...Given this, it seems reasonable to restrict input below a length where the password will become (effectively) truncated by blowfish.That length is also well above 10 characters however. parent throwawayReply 8 years ago
https://security.stackexchange.com/questions/39849/does-bcry...
Given this, it seems reasonable to restrict input below a length where the password will become (effectively) truncated by blowfish.
That length is also well above 10 characters however.