Yeah I would assume it’s the max length of the column in whatever database they’re storing the hashed password