diff --git a/src/content/docs/docs/first-setup.md b/src/content/docs/docs/first-setup.md
index a385c52..04041f8 100644
--- a/src/content/docs/docs/first-setup.md
+++ b/src/content/docs/docs/first-setup.md
@@ -9,7 +9,7 @@ A dashboard with nothing on it shows a welcome screen instead of tiles. Its **Op
 
 ## Set a password first
 
-In **General**, turn on Password Protection. The minimum length is 8 characters.
+In **General**, turn on Password Protection. The length must be between 8 and 1024 characters.
 
 :::caution
 Until a password is set, the endpoint that sets one accepts the first caller with no authentication. On a shared network, the first person to reach a fresh install can claim the account.
diff --git a/src/content/docs/docs/settings-reference.md b/src/content/docs/docs/settings-reference.md
index 84dc741..efe0e2d 100644
--- a/src/content/docs/docs/settings-reference.md
+++ b/src/content/docs/docs/settings-reference.md
@@ -38,7 +38,7 @@ If every app suddenly shows as unhealthy, the socket proxy address is the usual
 
 | Setting | What it does |
 | --- | --- |
-| Password Protection | Sets or changes the dashboard password. Minimum 8 characters. Leave blank to keep the existing one. |
+| Password Protection | Sets or changes the dashboard password. Between 8 and 1024 characters. Leave blank to keep the existing one. |
 | Sign out all devices | Ends every session everywhere, including the one you are using. Use it if you think a session may be compromised. |
 
 Locked out? See [password recovery](/docs/troubleshooting/#i-forgot-the-password-and-i-am-locked-out).