We joke a bout this, and yet one of the largest payment processors in the world @PayPal, sets a limit from 8 **up to a max** of 20 characters! That and the fact they allow you to fall back to SMS based 2FA despite having set up App based 2FA already!? Now that is a sad true joke
