Possible Duplicate:
How can Microsoft validate a shorter password on Microsoft accounts (MSDN)?
My Microsoft password was 18 characters long and when I updated to Outlook.com it started to ask me to enter my current password but the first 16 characters only.
How can they check if my password is correct by shortening it without storing it as plaintext?
