The login/min_password_lng parameter in the SAP system is set to '6'.
The length of a password directly impacts its vulnerability to being cracked. Therefore, for new systems, the default password length should be set to at least 10 characters, and password complexity should be enforced.
Defencemore OCA's P001 control reviews all password-related parameters configured in the system and lists those that are not suitable for secure use.