Fun fact, I bank with a bank I won’t name, who has a change password flow that allows for up to 32 character passwords.

Their login page only allows for 16 character passwords using the max length. This would truncate my password on login.

Backend handles the longer password just fine though.