Ask HN: Why are the apple id passwords limited to a max amount of 63 chars?

2 pointsdavidpelayo5y ago1 comments

I spent yesterday some time rotating my passwords and I found out that the Apple Id passwords are limited to 63 characters maximum.

Googling, I found nothing about this topic.

Then I went to the Apple StackExchange (probably not the right place) to ask about it without success (https://apple.stackexchange.com/q/387364/263000).

I'd like to see the potential technical reasons why a company would go for such design - rather than needing anyone from Apple sharing such internal details (as the guy at StackExchange replied).

Thanks!

1 comments

Someone5y ago

It’s prudent to have some limit, to protect against long password DoS attacks (https://www.acunetix.com/vulnerabilities/web/long-password-d...). 63 is such a limit and long enough to allow users to pick secure passwords.

j / k navigate · click thread line to collapse