In another question about password generation, I have read an answer suggesting something along the line of:
Let your password manager select characters from all the accepted categories (lowercase, uppercase, digits, standard punctuation, extended ASCII characters) and choose a very long length.
If the target has a shorter maximum length, just generate the longest they'll accept.
Is choosing the maximum-authorized password length a safe strategy?
My reasoning is that — assuming the maximum-authorized password length is long enough (say ≥24 characters), so that high-entropy passwords can still be generated if their length is smaller than the max — choosing a password of length m is much more limiting than choosing a password among those of length m, or m-1, or …, or 25, or 24.