The new NIST recommendations give a recommendation of at least a 64 character maximum.

Verifiers and CSPs SHOULD permit a maximum password length of at least 64 characters.

pages.nist.gov/800-63-4/sp800-63b.html#passwordve…