don't verify against 8 characters