Considering this service is for offline deployment, there's really no reason I should need a password whatsoever, never mind a minimum of 8 characters and other ineffective constraints. The account registration page should remove these password requirements