I don't see any reason to ever limit passwords to less than 100 characters.