security assist uses spry validation to set the password length.
in design view, select the username or password box field, notice the blue bounding box that appears, click that trigger the spry settings in the property inspector, this will allow you to clear the minimum and maximum settings for the different character types.
You may also need to edit the Server Validation server behavior to remove any entry length validations.