diff --git a/crates/api_common/src/lib.rs b/crates/api_common/src/lib.rs
index a79e842ee..1e57ffa70 100644
--- a/crates/api_common/src/lib.rs
+++ b/crates/api_common/src/lib.rs
@@ -426,7 +426,8 @@ pub async fn build_federated_instances(
 
 /// Checks the password length
 pub fn password_length_check(pass: &str) -> Result<(), LemmyError> {
-  if pass.len() > 60 {
+  let password_length = pass.len();
+  if !(10..=60).contains(&password_length) {
     Err(ApiError::err("invalid_password").into())
   } else {
     Ok(())