I’m implementing authentication in a Django site using the built-in auth module, including the built-in UserCreationForm.
I’d like to set a minimum length for passwo
Subclassing the user creation form sounds like a good approach. You can't enforce it at the database level, since Django only stores a hash of the password.