Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
Section 3.1 of the spec states:
It is recommended that passwords are kept to 12 characters or fewer, but it is not required.
The same recommendation is applied to usernames as well. This is embarrassingly short. People using MQTT in situations where storing a long password is a limitation will be aware of the fact. This doesn't mean that maximum password length recommendations should be given for everybody else.