We are in the process of migrating this forum. A new space will be available soon. We are sorry for the inconvenience.

Why are account signup passwords limited to 31 characters?


24x7servermanagement
2016-06-29, 03:35 AM
Well its subject to policy matters

MikeA
2016-06-20, 07:35 PM
Just use something that's 30 characters then setup 2FA w/ Google Authenticator once you're logged in if you're this worried.

jdavis
2016-06-18, 01:08 AM
I was in the process of signing up for an ovh.com account for one of your VPSes and got to the password entry screen. It refused to let me enter a rather long password generated by KeePass and says the limit is 31 characters. Why is there any limit at all? Is OVH, as one of the largest providers of server infrastructure in the world, not hashing account passwords?



See: Bcrypt - it is currently the correct way to store passwords of any length.