My User model contains :name, :email, and :password fields. All 3 have validations for length. An \"update account\" web page allows the user to update his name and email
In your user model, you could just ignore the password validation if it's not set.
validates_length_of :password, :minimum => N, :unless => lambda {|u| u.password.nil? }