I understand that there has to be some maximum for a number of reasons. 20 characters isn't long enough for me to even meet modern password recommendations though. I run into sites with even smaller limits regularly.
Discussion
Insecure by design.
And while we’re at it, how about stupid restrictions on what characters you can use? Punctuation too good for ya?
