diff --git a/src/routes/auth/register.ts b/src/routes/auth/register.ts
index 25c7b3dd..41798552 100644
--- a/src/routes/auth/register.ts
+++ b/src/routes/auth/register.ts
@@ -16,8 +16,8 @@ router.post(
 	check({
 		username: new Length(String, 2, 32),
 		// TODO: check min password length in config
-		// prevent Denial of Service with max length of 64 chars
-		password: new Length(String, 8, 64),
+		// prevent Denial of Service with max length of 72 chars
+		password: new Length(String, 8, 72),
 		consent: Boolean,
 		$email: new Length(Email, 5, 100),
 		$fingerprint: String,