Is there a rule somewhere of minimum 8 chars per password? Just curious.