I haven't seen any clearly defined limits within SmarterMail. Unless there is a functional limit by some mechanism we use, you should be able to create some really long passwords. I think you can safely use any limit you wish. If you do see a problem with them being a certain length let me know and I can investigate further.