diff --git a/security/Member.php b/security/Member.php
index 22d17afe8..47378a77b 100755
--- a/security/Member.php
+++ b/security/Member.php
@@ -11,18 +11,18 @@ class Member extends DataObject {
 		'Surname' => 'Varchar',
 		'Email' => 'Varchar',
 		'Password' => 'Varchar(160)',
-		'RememberLoginToken' => 'Varchar(1024)',
+		'RememberLoginToken' => 'Varchar(40)',
 		'NumVisit' => 'Int',
 		'LastVisited' => 'SS_Datetime',
 		'Bounced' => 'Boolean', // Note: This does not seem to be used anywhere.
-		'AutoLoginHash' => 'Varchar(1024)',
+		'AutoLoginHash' => 'Varchar(40)',
 		'AutoLoginExpired' => 'SS_Datetime',
 		// This is an arbitrary code pointing to a PasswordEncryptor instance,
 		// not an actual encryption algorithm.
 		// Warning: Never change this field after its the first password hashing without
 		// providing a new cleartext password as well.
 		'PasswordEncryption' => "Varchar(50)",
-		'Salt' => 'Varchar(50)',
+		'Salt' => 'Varchar(40)',
 		'PasswordExpiry' => 'Date',
 		'LockedOutUntil' => 'SS_Datetime',
 		'Locale' => 'Varchar(6)',