limit pass size to 16 chars