This is often an externally visible code smell that implies plaintext storage of passwords in a char(10) (or whatever the max length is) db column.