diff --git a/roles/ansible-os-hardening/defaults/main.yml b/roles/ansible-os-hardening/defaults/main.yml
index bae945ba..38027a47 100644
--- a/roles/ansible-os-hardening/defaults/main.yml
+++ b/roles/ansible-os-hardening/defaults/main.yml
@@ -8,7 +8,7 @@ os_auth_lockout_time: 600 # 10min
 os_auth_timeout: 60
 os_auth_allow_homeless: false
 os_auth_pam_passwdqc_enable: true
-os_auth_pam_passwdqc_options: 'disabled,disabled,16,12,8'
+os_auth_pam_passwdqc_options: 'min=disabled,disabled,16,12,8'
 os_auth_root_ttys: [console, tty1, tty2, tty3, tty4, tty5, tty6]
 os_auth_uid_min: 1000
 os_auth_gid_min: 1000