The problem is that the underlying hash algo is based on DES,
rather than something like sha512
Or pbkdf2, scrypt, or bcrypt. Des only has a key size of 56 bits, and using he alphabet that the tripcode uses, there’s a max effective keysize of 9. So you can use a password as long as you like, but only the first 9 chars are significantl.