Implement password policy controls at login to force users to change their password if the password does not meet password policy criteria.

1. Navigate to Password Policy > Password Policies.
2. Click the available Password Strength Preset, initially set as Default.
   The Password Strength Preset is the password policy applied to your instance. You can leave default as your instance password policy or you can select other options as described in the next step.
3. To customize your password policy, choose the appropriate password strength preset that applies to your organization:

   Option	Description
   Default	The default password policy applied to your instance.
   Medium	A password policy preset that minimizes the minimum character options to apply to your password policy criteria.
   High	A password policy preset that increases some of the minimum character options to apply your password policy criteria.
   Custom	A password policy preset that enables you to edit all of your password policy criteria.

4. Fill in the editable fields on your password policy criteria, based on your password strength preset:

   Table 1. Password Policy Fields

   Field	Description
   Minimum Password Length	Minimum length of the password. Cannot be fewer than 8.
   Maximum Password Length	Maximum length of the password. The default is 40.
   Minimum Uppercase Character(s)	Minimum number of uppercase characters in the password, from 0 to 10.
   Minimum Lowercase Character(s)	Minimum lowercase characters in the password, from 0 to 10.
   Minimum Numeric Character(s)	Minimum numeric of characters in the password, from 0 to 10.
   Minimum Special Character(s)	Minimum number of special characters in the password, from 0 to 10.
   Whitelisted Special Characters	If you must allow a restricted set of special characters, the restricted set must be delimited by commas. For example, if you enter "$,!" users can only use "$" and "!" as special characters in their password. No other special characters can be used, and a password with other special characters is not allowable.

5. (Optional) To test if a password meets the policy criteria, enter a password and click Test Your Password.
   The password comes back as valid or invalid. If invalid, error messages display with the criteria rules that are not met.
6. Click Update to put your password policy criteria into effect.