Bug 18298: minPaswordLength should not be < 3