I've noticed some websites, generally financial institutions, limit password length to a relatively small number. For example, mint.com limits is passwords to 16 characters (at least on the sign up page.) Why would they do that? I've read that sometimes websites will do that to limit the time password hashing algorithms run.
closed as off topic by random♦ Oct 8 '11 at 18:38
Questions on Super User are expected to relate to computer software or computer hardware within the scope defined in the FAQ. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about closed questions here.