Setting Password Length and Validity 

Use the following system profile parameters to specify the minimum length of a password and the frequency with which users must change their password.

Default: Three characters. You can set it to any value between 3 and 8.

To allow users to keep their passwords without limit, leave the value set to the default 0.