diff --git a/crmeb/app/adminapi/controller/Login.php b/crmeb/app/adminapi/controller/Login.php
index b47a2f0ab..f8548a03b 100644
--- a/crmeb/app/adminapi/controller/Login.php
+++ b/crmeb/app/adminapi/controller/Login.php
@@ -93,6 +93,10 @@ class Login extends AuthController
             ['captchaType', '']
         ], true);
 
+        if (count($password) > 32 || count($password) < 6) {
+            return app('json')->fail(400762);
+        }
+
         if ($captchaVerification != '') {
             try {
                 aj_captcha_check_two($captchaType, $captchaVerification);