10-character minimum validation