Paypal did this with 20 characters. I can't even remember how I figured it out so I could login.

I don't know if it truncated it automatically or it just stopped accepting input after 20 characters and I of course did not notice since the password entry fields were masked.