extend password size to 20