diff --git a/copyparty/web/splash.html b/copyparty/web/splash.html
index 848b8905..9974e7dc 100644
--- a/copyparty/web/splash.html
+++ b/copyparty/web/splash.html
@@ -111,7 +111,7 @@
 		<div>
 			<form id="lf" method="post" enctype="multipart/form-data" action="{{ r }}/{{ qvpath }}">
 				<input type="hidden" id="la" name="act" value="login" />
-				<input type="password" id="lp" name="cppwd" placeholder=" password" />
+				<input type="password" id="lp" name="cppwd" placeholder=" password" maxlength="64" />
 				<input type="hidden" name="uhash" id="uhash" value="x" />
 				<input type="submit" id="ls" value="Unlock" />
 				{%- if ahttps %}
@@ -137,9 +137,9 @@
 				<input type="hidden" id="la" name="act" value="login" />
 				{%- if this.args.usernames %}
 				<input type="text" id="lu" name="uname" placeholder=" username" size="12" />
-				<input type="password" id="lp" name="cppwd" placeholder=" password" size="12" />
+				<input type="password" id="lp" name="cppwd" placeholder=" password" size="12" maxlength="64" />
 				{%- else %}
-				<input type="password" id="lp" name="cppwd" placeholder=" password" />
+				<input type="password" id="lp" name="cppwd" placeholder=" password" maxlength="64" />
 				{%- endif %}
 				<input type="hidden" name="uhash" id="uhash" value="x" />
 				<input type="submit" id="ls" value="login" />