Unfortunately not

Hashing takes longer the longer the string is, so it technically could impact performance if many people with very long passwords log in simultaneously. 20 characters is ridiculous though, you could probably cap it at hundreds and still be completely fine.

Bet he watched a lot of videos about it on YouTube though

I heard it was opt-out originally, but I haven’t looked into it tbh

It’s like saying “nobody is not in danger”