Password Strength Rules

You can set password strength rules that a password policy uses to determine whether a password is valid.

The following table describes each password strength rule.
Table 1. Descriptions of the password attributes
Attribute Description
Minimum length Enter the minimum number of characters that a password can contain.
For example: if value of this rule set to 6, then password should have at least 6 characters.
Maximum length Enter the maximum number of characters that a password can contain.
For example: if value of this rule set to 12, then user is allowed to set password up to 12 characters.
Maximum repeated characters Enter the maximum number of duplicate characters that a password can contain.
For example, if value of this rule is 2, then user can not add PPP as part of the password
Minimum unique characters Enter the minimum number of unique characters that a password must contain.
For example: if value of this rule is 3, then password should have at least 3 unique characters such as abcdcba .
Minimum alphabetic characters Enter the minimum number of alphabetic characters that a password must contain.
For example: if value of this rule is 3, then password should have at least 3 alphabets, such as a1b2c3d.
Minimum numeric characters Enter the minimum number of numeric characters that a password must contain.
For example: if value of this rule is 3, then password should have at least 3 numbers, such as a1b2c3d.
Characters not allowed Enter characters that are not allowed in the password. Do not separate any characters with a space or another delimiter, unless a space or the delimiter is a disallowed character.
For example: if you want to specify _-|{}& and * as disallowed characters, then
A correct value for this field is:
_-|{}&*
An incorrect value for this field is:
_ - | { } & *
or
_,-,|,{,},&,*
Required characters Enter character that must be in the password. Do not use a comma or a space or another delimiter.
For example : if password value must contain a, b and c characters then -
A correct value for this field is:
abc
An incorrect value for this field is:
a b c
or
a,b,c
Restricted to characters Enter the set of characters to which the password is restricted. That is, the password must contain only these characters. Do not separate any characters with a space or another delimiter, unless a space or the delimiter is a character that must be specified.
For example: If you want to specify all lowercase letters then -
A correct value for this field is:
abcdefghijklmnopqrstuvwxyz
An incorrect value for this field is:
a b c d e f g h i j k l m n o p q r s t u v w x y z
or
a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z
Starts with characters Enter the sequence of characters that the password must start with. Do not separate any characters with a space or another delimiter, unless a space or the delimiter is a character that must be specified.
For example: If you want to specify that a password should start with 1234 then-
A correct value for this field is:
1234
An incorrect value for this field is:
1 2 3 4
or
1,2,3,4
Repeated history length Enter the number of passwords that are retained. This value specifies how many unique passwords must be used before a previous password can be re-used. Passwords that match any password in the history list cannot be reused. The history is updated every time the password is changed.
For example:
if this value is 7, then the password must be changed 7 times to different passwords before the old password can be reused.
Reversed history length Enter the numeric value that specifies how many passwords, spelled backwards are kept in history. Passwords that match any password in the history list cannot be reused. The history is updated every time the password is changed.
For example:
If the value for this rule is 7, then the password must be changed 7 times to different passwords before the old password (spelled backwards) can be reused.
Disallow user name Select the check box to disallow the use of the user name as a part of password. The comparison is case sensitive.
For example: if username is John, then user is not allowed to set password containing word John.
Disallow user name (with Case-Insensitivity) Select the check box to disallow the use of the user name as a part of password. The comparison is case insensitive.
For example: if username is John, then user is not allowed to set password containing word John. It is not a case sensitive comparison so user can not have John, john, johN, etc as part of the password.
Disallow user ID Select the check box to disallow the use of the user ID as a part of password. The comparison is case sensitive.
For example: if user ID is JSmith, then user is not allowed to set password containing word JSmith. Since the comparison is case-sensitive, the user can have Jsmith, jsmith, etc as part of the password.
Disallow user ID (with Case-Insensitivity) Select the check box to disallow the use of the user ID as a part of password. The comparison is case insensitive.
For example: if user ID is JSmith, and comparison is case-insensitive, the user can not have Jsmith, jsmith, etc as part of the password.
Do not allow in dictionary Select the check box to reject the password if its value matches a term in a dictionary that you configure, containing a list of unwanted terms.
Note: This option is only available when a dictionary is configured.
Related information
For more information, refer to the information center.