diff --git a/crmeb/app/adminapi/controller/Login.php b/crmeb/app/adminapi/controller/Login.php
index 575942a87..e3e9d877a 100644
--- a/crmeb/app/adminapi/controller/Login.php
+++ b/crmeb/app/adminapi/controller/Login.php
@@ -105,6 +105,9 @@ class Login extends AuthController
         }
 
         try {
+            if (strlen(trim($password)) > 500) {
+                return app('json')->fail(400762);
+            }
             $password = $rsa->privateDecrypt($password);
         } catch (\Throwable $e) {
             return app('json')->fail($e->getMessage());