The issue is not the 20 characters, but the underlying reason for it. There&#x27;s no technical reason they would need it unless they were storing it insecurely.<p>Granted it&#x27;s possible they&#x27;re limiting it to 20 for a nontechnical reason, but I have some 40-character passwords in a password manager. Long passwords are not only reasonable, but this is a giant alarm bell if they even imply they might be storing them insecurely.