title: Minimum user password length
body: <p>User accounts for online grocery shopping in Tesco here in the UK require a password of between 6 and 10 characters.  While it irritates me somewhat that they have limited the password to 10 characters (my password generator defaults to 32), the fact that they allow 6 character passwords to protect user data, including credit card details, concerns me.</p>
  
  <p>Does a 6-character password represent a security risk, or are they a good example to follow?</p>