From 7d1db9e20c8ce4b324baac1fc5725be7234bb7c6 Mon Sep 17 00:00:00 2001
From: SandObserver <260779319+SandObserver@users.noreply.github.com>
Date: Fri, 18 Sep 2026 09:17:00 -0400
Subject: [PATCH] Docs: state the accepted password length range

---
 src/content/docs/docs/first-setup.md        | 2 +-
 src/content/docs/docs/settings-reference.md | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/content/docs/docs/first-setup.md b/src/content/docs/docs/first-setup.md
index a385c52..04041f8 100644
--- a/src/content/docs/docs/first-setup.md
+++ b/src/content/docs/docs/first-setup.md
@@ -9,7 +9,7 @@ A dashboard with nothing on it shows a welcome screen instead of tiles. Its **Op
 
 ## Set a password first
 
-In **General**, turn on Password Protection. The minimum length is 8 characters.
+In **General**, turn on Password Protection. The length must be between 8 and 1024 characters.
 
 :::caution
 Until a password is set, the endpoint that sets one accepts the first caller with no authentication. On a shared network, the first person to reach a fresh install can claim the account.
diff --git a/src/content/docs/docs/settings-reference.md b/src/content/docs/docs/settings-reference.md
index 84dc741..efe0e2d 100644
--- a/src/content/docs/docs/settings-reference.md
+++ b/src/content/docs/docs/settings-reference.md
@@ -38,7 +38,7 @@ If every app suddenly shows as unhealthy, the socket proxy address is the usual
 
 | Setting | What it does |
 | --- | --- |
-| Password Protection | Sets or changes the dashboard password. Minimum 8 characters. Leave blank to keep the existing one. |
+| Password Protection | Sets or changes the dashboard password. Between 8 and 1024 characters. Leave blank to keep the existing one. |
 | Sign out all devices | Ends every session everywhere, including the one you are using. Use it if you think a session may be compromised. |
 
 Locked out? See [password recovery](/docs/troubleshooting/#i-forgot-the-password-and-i-am-locked-out).