BCrypt effectively limits password length

[lkraider]

BCrypt uses only up to 72 chars of the password for its hash, so longer passwords are effectively truncated.

precedent:

BCrypt effectively limits password length https://code.djangoproject.com/ticket/20138