The bug

When you try to set a password with 257 characters it shows that the password is not strong enough (see Password not long enough.png).

However, when the last character is removed it accepts the password. Therefore the error message is incorrect.