Microsoft has announced that they have removed the 16 character Azure Active Directory password limit and admins can now use up to a maximum of 256 characters. This aligns the passwords lengths with those of on-premises Windows Active Directory services. […]

from https://www.bleepingcomputer.com/news/microsoft/azure-active-directory-now-supports-256-character-passwords/