diff --git a/salt/common/tools/sbin/so-user b/salt/common/tools/sbin/so-user
index 5901cbd1b..93e184fd9 100755
--- a/salt/common/tools/sbin/so-user
+++ b/salt/common/tools/sbin/so-user
@@ -29,7 +29,7 @@ if [[ $# -lt 1 || $# -gt 3 ]]; then
   echo "      add: Adds a new user to the identity system; requires 'email' parameter, while 'role' parameter is optional and defaults to $DEFAULT_ROLE"
   echo "  addrole: Grants a role to an existing user; requires 'email' and 'role' parameters"
   echo "  delrole: Removes a role from an existing user; requires 'email' and 'role' parameters"
-  echo "   update: Updates a user's password; requires 'email' parameter"
+  echo "   update: Updates a user's password and disables MFA; requires 'email' parameter"
   echo "   enable: Enables a user; requires 'email' parameter"
   echo "  disable: Disables a user; requires 'email' parameter"
   echo " validate: Validates that the given email address and password are acceptable; requires 'email' parameter"
@@ -98,7 +98,7 @@ function validatePassword() {
   password=$1
 
   len=$(expr length "$password")
-  if [[ $len -lt 6 ]]; then
+  if [[ $len -lt 8 ]]; then
     fail "Password does not meet the minimum requirements"
   fi
   if [[ $len -gt 72 ]]; then