• Xanvial@lemmy.one
    link
    fedilink
    English
    arrow-up
    8
    ·
    edit-2
    1 year ago

    Some password encryption methods has max characters length. For example Bcrypt has 72 max length. This is mostly to avoid taking too much time encrypting user input.

    If there’s no limit someone can technically froze the server by inputting large password (not because the request is big, but encryption process is exponentially takes more CPU process the longer it is)