If the minimum password length is 8 and the last two characters are the current month or year, the actual password length is roughly 6.