passwords can only be of length 10