load passwords length from global settings; refactored recovery control