Not a problem because passwords are hashed, which means they take up a fixed size, and you should have form upload size limits anyway.