XP encrypts/conceals the password so that it is not readable by certain password recovery programs available on the Net, whose URL I shall refrain from mentioning....
So it is normal that it should display more dots that the actual length of the password.