From 12bebf5389ef9e6d47c1fb56908ccf13bfa861c3 Mon Sep 17 00:00:00 2001
From: Adrian Bonpin <adrianbonpin@gmail.com>
Date: Sun, 26 Apr 2026 12:13:08 -0500
Subject: [PATCH] fix: unify password minimum length to 10 characters across
 all flows

---
 components/profile/settings-security-tab.tsx | 4 ++--
 lib/api/user.ts                              | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/components/profile/settings-security-tab.tsx b/components/profile/settings-security-tab.tsx
index 9b2d092..d89c088 100644
--- a/components/profile/settings-security-tab.tsx
+++ b/components/profile/settings-security-tab.tsx
@@ -81,8 +81,8 @@ export function SettingsSecurityTab() {
       return
     }
 
-    if (newPassword.length < 8) {
-      setPasswordMessage({ type: "error", text: "Password must be at least 8 characters" })
+    if (newPassword.length < 10) {
+      setPasswordMessage({ type: "error", text: "Password must be at least 10 characters" })
       return
     }
 
diff --git a/lib/api/user.ts b/lib/api/user.ts
index f530d7f..afc2b19 100644
--- a/lib/api/user.ts
+++ b/lib/api/user.ts
@@ -227,7 +227,7 @@ export const userRoutes = new Elysia({ prefix: "/user" })
     },
     {
       body: t.Object({
-        newPassword: t.String({ minLength: 8 }),
+        newPassword: t.String({ minLength: 10 }),
       }),
     },
   )