I've always used VARCHAR(320). Here's why. The standard dictates the following limitations: 64 characters for the "local part" (username). 1 character for the @ symbol. 255 characters for the domain name.
