updated min chars for external passwords to 1 char