Issue 2: Change password length to 40 bytes, enough for security level until 256 bits beyond 2030