Should I have a maximum password length?
According to a recent TNW article:
Microsoft doesn’t like long passwords. In fact, the software giant not only won’t let you use a really long one in Hotmail, but the company recently started prompting users to only enter the first 16 characters of their password.
This practice seems counter-productive.
Would they have made this decision based on a limitation or particular behaviour of their hashing algorithm?