reduce password to 8 chars