Technical reasons to have low maximum password lengths
security.stackexchange.com