Sitecore security relies on ASP.NET membership, role and profile providers. By standard, you can configure the membership options in the web.config file using the
/configuration/system.web/membership/providers/add elements.
If you want to ensure the minimum length of a new user password, select the provider element named “slq” and change the attribute named “minRequiredPasswordLength” to be equal to the minimum length you required.