diff --git a/server/plugin/plg_authenticate_local/service.go b/server/plugin/plg_authenticate_local/service.go
index f26a7d38..e1403e2d 100644
--- a/server/plugin/plg_authenticate_local/service.go
+++ b/server/plugin/plg_authenticate_local/service.go
@@ -27,7 +27,11 @@ func createUser(user User) error {
 	if user.Password == "" {
 		return ErrNotValid
 	}
-	p, err := bcrypt.GenerateFromPassword([]byte(user.Password), bcrypt.DefaultCost)
+	pwd := user.Password
+	if len(pwd) > 72 {
+		pwd = pwd[0:72]
+	}
+	p, err := bcrypt.GenerateFromPassword([]byte(pwd), bcrypt.DefaultCost)
 	if err != nil {
 		return err
 	}