DirectAdmin's limit is by the length of the field; you can check by typing in and counting the "*" characters.
Different Linux/FreeBSD distributions may have different limits. Check your OS distribution.
In older versions of linux no matter how many characters you used only the first eight were significant (for example, passwords and password2 would both be accepted if the password was password), but that was a long time ago.
Jeff