For smartphones and tablets, a 4-8 digit PIN is acceptable as long as you also configure the device to erase itself after 10 bad password guesses.
For Exchange users, this is a default and the user must set the PIN. See your device manual for instructions for those not using Exchange.