I\'m not sure how password hashing works (will be implementing it later), but need to create database schema now.
I\'m thinking of limiting passwords to 4-20 charact
for md5 vARCHAR(32) is appropriate. For those using AES better to use varbinary.