---
title: "Discussion on \"Bcrypt Max Password Length: The 72-Byte Limit Explained\" | Hashnode"
description: "Discussion on \"Bcrypt Max Password Length: The 72-Byte Limit Explained\". Bcrypt only uses the first 72 bytes of a password. Why, what each library does, and tested fixes for Python, FastAPI, Node and PHP."
url: "https://hashnode.com/posts/bcrypt-max-password-length-the-72-byte-limit-explained/6af741a69b479d68cbd545af"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Bcrypt Max Password Length: The 72-Byte Limit Explained](https://shahzebzafar.hashnode.dev/bcrypt-max-password-length-the-72-byte-limit-explained?utm_source=hashnode&utm_medium=feed)

Bcrypt only uses the first 72 bytes of a password. Why, what each library does, and tested fixes for Python, FastAPI, Node and PHP.

1d ago · 9 min read · shahzebzafar.hashnode.dev  
Read the article

-   [#bcrypt](https://hashnode.com/tag/bcrypt)
-   [#security](https://hashnode.com/tag/security)
-   [#python](https://hashnode.com/tag/python)
-   [#nodejs](https://hashnode.com/tag/nodejs)
-   [#php](https://hashnode.com/tag/php)

## Written by

[Shahzaib Zafar](https://hashnode.com/@shahzebzafar)

@shahzebzafar · Lahore, Pakistan

  
[View profile](https://hashnode.com/@shahzebzafar)

## Responses

Markdown supported · ⌘↵ to post

No responses yet.