There's little benefit to limiting the length of this field, so I suggest increasing it to 255 characters to allow for future password encoders.
While you're at it, changing the example encoder from a single iteration of sha1 would be nice, since many people will cut & paste it without realising how weak it is.
Happy to make a pull request for both these changes if you like.
bcrypted password hashes are 60 characters long, but the User entity defines
$password
as a 40-char column:There's little benefit to limiting the length of this field, so I suggest increasing it to 255 characters to allow for future password encoders.
While you're at it, changing the example encoder from a single iteration of sha1 would be nice, since many people will cut & paste it without realising how weak it is.
Happy to make a pull request for both these changes if you like.