If it is feasible to locate a shorter password which hashes to the same price as a longer password, the hashing algorithm is broken. $endgroup$$begingroup$ As hashes are fastened size, does that indicate that even when not specified when creating the password, all login programs would wish to have some kind of greatest enter duration (although almo