Use the glide.login.no_blank_password property to prevent users from logging in to the Now Platform with blank passwords, or by leaving the Password field empty.

Even if the admin purposefully assigns an empty value or blank password in user records, a user can't log in without providing a value in the Password field.

More information

AttributeDescription
Property name glide.login.no_blank_password
Configuration type System Properties (/sys_properties_list.do)
Configure in Instance Security Center Yes
Purpose To ensure strong authentication as sometimes the username are easy to guess within an organization.
Recommended value true
Functional ImpactOperations should not use blank passwords because it is viewed as a critical security risk. However, if there is a valid case for such usage, there is a possibility of an outage. Users with blank passwords wouldn't be able to log in to the instance.
Security risk (High) An attacker is able to log in to the instance with the default usernames, or by specific individual/group (usually firstname.lastname) without any password. Doing so is viewed as a critical security risk, because it would enable a public user to violate the confidentiality and integrity of the instance data.

To learn more about adding or creating a system property, see Add a system property.