Sure, but why would the code ever do anything that could result in failures of longer passwords? I'm struggling to think of a mechanism that could do that inadvertently. You almost have to do .length don't you?