This control defines the minimum number of characters a user password must contain. Enforcing a minimum password length helps protect against brute force and dictionary attacks.
Solution
Make sure 'Minimum password length' is set to a minumum of 8 characters.