It is truly bizarre in 2025 that you are still sending plain text passwords by email.
send a link and let people change their password directly so you and nobody else can possibly have the password.
Also why have a maximum length?
Shocking security for the modern age, its like a throwback to 2000