Yeah, that's a bit over the top. I think I initially made it that long because I didn't want to deal with requiring at least one uppercase, special char, etc. I also need to do password reset.