Password length policy on Litium 5.6

Questions
1

How can we set a policy for Litium that it sets a minimum length for the password? I searched the forum and created this setting in my Web.Config:

<passwordPolicy lockoutCount="-1" lockoutSeconds="300" expirePeriodInDays="-1" complexityRule="false" lengthRule="true" requiredLength="10"/>

But the above configuration is not working. I tried set minimum password length to 10 characters.

Litium version: [5.6]

2

I think prior to Litium 6, the minimum required length when having lengthRule set to true was 6 characters. The possibility to set a custom minimum length was added later.