Require at least 4-digit pw.

Otherwise is confusing when user types one key and apparently is done?