password only 2 char min