change default to 12-chars no strength to '16 stronger'