The bcrypt implementation only uses the first 72 bytes of a string. Any characters after that are ignored.
what
Older Unix systems used to only do the first 8 bytes for passwords. Sometimes for my own amusement when logging into one of the Sun machines at school, I’d type in enough of my password to count and then just mash the keyboard.
for a long time, hotmail (and i think windows live mail) only checked the first 16 characters.
That’s almost as good as the ones that limit password on the sign-in UI, but not on the sign-up
I have run across one that allowed arbitrary length when doing account creation and password reset but silently truncated the login input.
Took me hours to figure out that my password was longer than the documented length, try it and then have no problems.
Git’s
autocrlf
feature causes more issues than it solves in my experience. I don’t think there are really any tools on Windows that can’t handle Unix line endings any more. Even notepad can now.I recommend you set it to
input
which will fix them to be Unix line endings on commit, and not change them back on checkout.