I've just noticed that my Ubuntu file server let me login with the wrong password

My password is 9 characters long but if i miss of the last letter (ie only enter the first 8 ) it still logs me in.

Any idea's why?