The "Password length" option is located under the "User registration settings" acp_board page. It is however not under the "Security settings" page. I suggest it be added to that page as well.