Password constraints are not obvious

[barryhughes]

Using TypeMill 2.0.3, I started setting things up locally. I used my password manager to generate a password:

Then I was taken to /tm/login and asked to login. I tried, but got a Wrong password or username error:

I was a little confused, and spun my wheels trying to figure this out a little. The problem seemed to be because when the inputs are validated it is enforcing a rule that passwords must be between 5 - 20 characters in length.

20 characters seems like quite a low limit—it is definitely below the password defaults I set up in my password manager—but ignoring that: there is no feedback to make it clear that this expectation was not met. It feels like this feedback should be given during the setup stage, before the new admin account is created.

[barryhughes]

Poking around a little more, this might be because the password constraints are different during signup? Looks we allow upto 40 chars at this stage.