Generate boundary value and edge case test data for password fields. bcrypt’s 72-character limit, null bytes, emoji passwords, SQL injection bypass strings, and “password” … still the most common password in existence and somehow still surprising everyone.