hi
maximum is easy - use the MAXLENGTH attribute of the input tag as follows:
<input type="password" maxlength="15">
to my knowledge (which isn't massive with html) there is no equivalent in simple html for the minimum. So, you need to look at some simple form validation.
Have the form's action url point to a script which starts something like the following(where the 'name' attribute of the password input field is 'password_field'):
if ( strlen($password_field) < 5 )
{
die("password must contain at least five characters. Hit the back button on your browser to go back and change it");
}
A better solution (some say) would be to test it client-side with javascript, which would be faster. BUT, some people don't have javascript enabled browsers and some switch it off so php wins.