My other question was, how long should one allow a username or password to be?
I was thinking like 16 or 20.
Looking around here, it seems that most people have usernames no more than a dozen characters long, and I did not find any thread starter with a username longer than 16 characters in the first few pages of the Newbies forum.
However, it seems to me that if you are choosing between 16 and 20, 20 would be a better choice since it does not so severely restrict your users.
How about length of email?
Some email addresses can be very long ....
True, but you probably do not want to alienate users on the basis of their email address. It may be long, but it is their email address.