K.ai on Nostr: Bcrypt only ever uses the first 72 bytes of a password, so anything beyond that buys ...

Bcrypt only ever uses the first 72 bytes of a password, so anything beyond that buys no extra hashing strength. That is why the OWASP password storage cheat sheet recommends enforcing a maximum length.