I understand that there has to be some maximum for a number of reasons. 20 characters isn't long enough for me to even meet modern password recommendations though. I run into sites with even smaller limits regularly.