Security and password

As regards your second question, you could add a line via css, as suggested in this post.

As regards the length of the password, you could overwrite the password panel field and add a validator:

public function validate() {
    return v::minLength($this->result(), 15);
  }

You should probably tell the user that 15 characters are required, then, since the validator does not give any clues.