enforcing a minimum length, increases the set of possible passwords.

"enforcing complexity" rules, constrain the set of possible passwords, reducing benefit from enforced minimum length.