I was resetting a password a few moments ago, and I was given a character limit of around 10 characters to make a secure password with.
After resetting the password, I went to enter my password, and noticed there is an unlimited (or much larger) character allowance in the field.
My question is, is there any actual security advantage to forcing a character-limit on password-reset, and then allowing unlimited characters on login?
To me it seems as if this is more along the lines of what I see people say around here of "Security through Obscurity."
Also, a negative I see to this is if people aren't paying attention to the field not allowing any characters after x, and then try to login with what they "think" is their password, they will be locked out of their account. This is especially important since I didn't notice any warnings of character limits, which you usually see on sites.
I also wanted to mention that this ties into my other question here Why, after a certain character limit, are larger passwords labeled as "weak" on some sites? but wanted to separate them into separate questions.