This could be due to the fact that it introduced a new password policy of mini­mum password length of 8 while the website was live [10].
only a small amount of early users have passwords of length less than 8; (ii) the majority of passwords of most datasets are Uni and Bi.