QC11 Change Password validation

In QC11, I have code to validate a users password, upon login, is not blank and 8 or more characters.  But this does not stop users using the 'Change Password' function to change their password to less than 8 and getting locked out on next login.

I can see anything in the workflow to put this validation on the Change Password function.  Anybody know how and where to do this?

Thanks