There is no minimum length for the password fields

Even using "1" as a password does not throw a validation error while registering and changing profile.