Password strength policy

Last Updated : Aug 03, 2022 |

The password strength policy that the system administrator defines enforces the following constraints:

  • Passwords must be 6 to 25 characters long. The default character length is 14.

  • Passwords must contain a combination of the following characters: a-z, A-Z, 0-9, {, }, |, (, ), <, >, ,, /, ., =, [, ], ^, _, @, !, $, %, &, -, +, ", :, ?, `, or \

  • Passwords do not require a minimum character type. However, the default is 0 lowercase, 0 uppercase, 0 numeric, and 0 special character. The sum cannot exceed the minimum total length.

    The policy allows the minimum number of characters of certain types (lowercase, uppercase, numeric, special) in the password. The default is 0 for each of them.

  • Password can contain a maximum of 2 consecutive characters. The valid values are from 1 through 5. The default value is 2.

  • Password can contain a maximum number of 4 consecutive characters from the same character type. The valid values are from 1 through 5. The default value is 4.

When you enable the password strength policy, passwords must not be your user ID in forward or reverse order.

Passwords must not be a value based on a dictionary word.

You can also disable the password strength policy.