3 ms·

but thats my point. if that password rule were to support phones, which i doubt, why the other rule demands a lower case and an upper case char?