This should be higher, since some merged mining pools (auxpow for example) require all your coin adresses to be added in the password. Current limit is 255 chars, I had a pwd of over 500 chars but I couldn't store this value.

Same should apply for the usernername field just to be sure, pool can choose where the long string values should be entered.

grts!