{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":40523,"path":"platform-security/authentication/enable-password-policies.md","title":"Enable password policies on your instance","bundle":null,"doc_type":null,"release":"australia","body":"\n# Enable password policies on your instance\n\nImplement password policy controls at login. Force users to change their password if the password does not meet the password policy criteria.\n\n## Before you begin\n\nRole required: password\\_policy\\_admin\n\n## About this task\n\nThe Password Policy plugin \\(com.glide.password\\_policy\\) is enabled by default. The policy goes into effect when a user changes or resets the password.\n\nThe **Password Strength Preset** field is automatically set to **Default Strong**. If you want to add new criteria, you can perform the following procedure.\n\nIf you customized your instance through the **ValidatePasswordStronger** installation exit or your Password Reset credential store **pwd\\_cred\\_store** property, then see [password policy properties](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/password-policy-properties.md) to know how to implement a password policy for your instance.\n\n**Note:** The active password policy is highlighted for the Instance as shown.\n\n\\[Omitted image \"password-highlight.png\"\\] Alt text: Password Highlighted when set as active\n\nTo change the password policy navigate to **All** > **Password Reset** > **Credentials Stores**, select the credentials and change the **Password policy** field to the required policy input.\n\n## Procedure\n\n1. Navigate to **All** > **Password Policy** > **Password Policies**.\n\n2. Click **New**.\n\n The Password Policy form appears.\n\n3. Specify the **Name** for your password policy.\n\n4. In the Password Policy Criteria section, select one of the following presets from the **Password Strength Preset** field.\n\n\n
\n\nPassword Strength Preset\n\n\n\nDescription\n\n
\n\n**Default**\n\n\n\nAuto-populates the fields for required password characters as follows:- Sets **Minimum Uppercase Character\\(s\\)** to 1.\n- Sets **Minimum Lowercase Character\\(s\\)** to 1.\n- Sets **Minimum Numeric Character\\(s\\)** to 1.\n- Sets **Minimum Special Character\\(s\\)** to 0.\n The minimum password length is 8 characters, and the maximum is 100.\n\n
\n\n**Medium**\n\n\n\nAuto-populates the fields for required password characters as follows:- Sets **Minimum Uppercase Character\\(s\\)** to 1.\n- Sets **Minimum Lowercase Character\\(s\\)** to 1.\n- Sets **Minimum Numeric Character\\(s\\)** to 1.\n- Sets **Minimum Special Character\\(s\\)** to 1.\n The minimum password length is 12 characters, and the maximum is 40.\n\n
\n\n**High**\n\n\n\nAuto-populates the fields for required password characters as follows:- Sets **Minimum Uppercase Character\\(s\\)** to 1.\n- Sets **Minimum Lowercase Character\\(s\\)** to 2.\n- Sets **Minimum Numeric Character\\(s\\)** to 1.\n- Sets **Minimum Special Character\\(s\\)** to 3.\n The minimum password length is 8 characters, and the maximum is 100.\n\n
\n\n**Default Strong**\n\n\n\nAuto-populates the fields for required password characters as follows:- Sets **Minimum Uppercase Character\\(s\\)** to 1.\n- Sets **Minimum Lowercase Character\\(s\\)** to 1.\n- Sets **Minimum Numeric Character\\(s\\)** to 1.\n- Sets **Minimum Special Character\\(s\\)** to 1.\n The minimum password length is 8 characters, and the maximum is 100.\n\n
\n\n**Custom**\n\n\n\nAuto-populates the fields for required password characters as follows:- Sets **Minimum Uppercase Character\\(s\\)** to 1.\n- Sets **Minimum Lowercase Character\\(s\\)** to 1.\n- Sets **Minimum Numeric Character\\(s\\)** to 1.\n- Sets **Minimum Special Character\\(s\\)** to 1.\n The minimum password length is 8 characters, and the maximum is 100.\n\n You can also customize the **Password Policy Script** that is displayed.\n\n
\n\n**Advanced**\n\n\n\nSelecting **Advanced** displays **Password Rule Script** and **Password Strength Script**. Based on your requirement you can customize these scripts.\n\n
**Note:** Password policy is applied based on the selected preset.\n\n5. On the form, fill in the remaining fields.\n\n\n
\n\nField\n\n\n\nDescription\n\n
\n\nMinimum Password Length\n\n\n\nMinimum length of the password. This option is displayed for all the presets except for **Advanced**. Set this field to a minimum of 8–10 characters.\n\n
\n\nMaximum Password Length\n\n\n\nMaximum length of the password. This option is displayed for all the presets except **Advanced**. Set this field to a maximum of 100 characters.\n\n
\n\nMinimum Uppercase Character\\(s\\)\n\n\n\nMinimum number of uppercase characters in the password, from 0 to 10.\n\n
\n\nMinimum Lowercase Character\\(s\\)\n\n\n\nMinimum lowercase characters in the password, from 0 to 10.\n\n
\n\nMinimum Numeric Character\\(s\\)\n\n\n\nMinimum numeric of characters in the password, from 0 to 10.\n\n
\n\nMinimum Special Character\\(s\\)\n\n\n\nMinimum number of special characters in the password, from 0 to 10.\n\n
\n\nIncluded Special Characters\n\n\n\nAllow a restricted set of special characters without any delimiter. For example, if you enter `$,!`, then users can only use \"$\" and \"!\" as special characters in the password. No other special characters can be used. A password with other special characters is not allowed.\n\n
\n\nExcluded Special Characters\n\n\n\nAllow a restricted set of special characters without any delimiter.For example, if you enter `@$!`, then users cannot use '@', '$' and '!' as special characters in their passwords.\n\n**Note:** This option is available if the **glide.password\\_policy.use\\_excluded\\_special\\_char** property is enabled.\n\n
\n\nDisallow User Data\n\n\n\nOption to disallow user data that is authentication-related.\n\n
\n\nSequence Length Threshold\n\n\n\nThe sequence length of your password.\n\n
\n\nRepetition Length Threshold\n\n\n\nThe repetition length of your password.**Note:**\n\n- Both the sequence length threshold and repetition length threshold can have a maximum of eight characters. These fields enable you to restrict weak combinations of passwords that have predictable and repeating sequences such as \"123456\", \"qwerty\", \"!@\\#$%^\", \"aaaaa\", and so on.\n- If **Password Strength Preset** is set to **Default Strong**, then the length for both sequence length threshold and repetition length threshold is set to four characters.\n\n\n
\n\nTest Your Password\n\n\n\nSpecify your actual password in this field.\n\n
6. Click **Test Your Password**.\n\n7. After the password is tested as valid, click **Submit** to submit the password.\n\n **Note:** Always test your password before submitting.\n\n\n"}}