Guessing a problem with this would be this here:
https://meta.discourse.org/t/users-bypassing-the-10-character-rule/35257