I wouldn't mind a limit of 100 characters or so. Enough to fit in unbreakable entropy. But the limits are usually around 16 chars. WTF, are they not hashing the passwords?