UPS supplier's password policy flip-flops from unlimited, to 32, then 64 characters

CyberPower Systems faced criticism after a security update imposed a 32-character password limit on its PowerPanel Cloud app; following customer pushback, the company plans to raise the cap to 64 characters within two weeks. The vendor denied truncating or storing passwords in plaintext, and the report contrasts the decision with guidance from NIST, OWASP, NCSC, and CISA, which generally support long passphrases and discourage arbitrary upper limits while emphasizing MFA/SSO.