System Generated Passwords Not Following Rules

System Generated Passwords Not Following Rules - I have passwords enabled for 8 characters, 1 cap, 1 number, 1 special - the password that generates is 6 digits of mixed caps and numbers.
Where should I check to verify coding on this?

@msi_admin
‘Password Security Settings’ use when password set manually.
For ‘System Generated Passwords’ use function ‘generatePassword’ of file ‘modules/Users/User.php’ . Look at the function and understand at all.