Just curious, but long passwords shouldn&#x27;t in any way affect CPU load. After the first hash (of thousands?), it&#x27;s just hashing a hash, which is always the same length unrelated to the original password length.<p>Even though I can&#x27;t think of a legitimate use for &gt; 256 character passwords.