{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":40632,"path":"platform-security/authentication/set-your-password-policy.md","title":"Configure your password policy","bundle":null,"doc_type":null,"release":"australia","body":"\n# Configure your password policy\n\nPassword policy criteria enables you to secure your password and adhere to the minimum password complexity requirements.\n\n## Before you begin\n\nRole required: password\\_policy\\_admin\n\n## About this task\n\nThe Password Policy \\[com.glide.password\\_policy\\] plugin is enabled by default. It goes into effect when a user changes or resets the password. If you customized your instance, through the ValidatePasswordStronger installation exit or your Password Reset credential store \\[pwd\\_cred\\_store\\], see [password policy properties](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/password-policy-properties.md).\n\n## Procedure\n\n1. Navigate to **All** > **Password Policy** > **Password Policies**.\n\n **Note:** **Default Strong** preset in enabled as a default password acceptance criteria. In case, if you want to add a new criteria, you can perform the following steps.\n\n2. Click **New**.\n\n The Password Policy New record page, has the following sections that you must specify for setting your password:\n\n - **Password Policy Criteria**\n - **Sequence Matching**\n - **Test Your Password**\n \\[Omitted image \"password-policy-new-record.png\"\\] Alt text: Password policy new record creation\n\n3. Specify the **Name** for your password policy.\n\n4. In the **Password Policy Criteria** section, select the preset from the **Password Strength Preset**. The presets available are as follows:\n\n\n
\n\nPassword Strength Preset\n\n\n\nDescription\n\n
\n\nDefault\n\n\n\nSelecting **Default** auto-populates the password characters required as follows:- One Minimum Uppercase Character\n- One Minimum Lowercase Character\n- One Minimum Numeric Character\n\n\n
\n\nMedium\n\n\n\nSelecting **Medium** auto-populates the password characters required based on characters as follows:- One Minimum Uppercase Character\n- One Minimum Lowercase Character\n- One Minimum Numeric Character\n- One Minimum Special Character\n\n\n
\n\nHigh\n\n\n\nSelecting **High** auto-populates the password characters as follows:- One Minimum Uppercase Character\n- Two Minimum Lowercase Character\n- One Minimum Numeric Character\n- Three Minimum Special Character\n\n\n
\n\nDefault Strong\n\n\n\nSelecting **Default Strong** auto-populates the password characters required based on characters as follows:- One Minimum Uppercase Character\n- One Minimum Lowercase Character\n- One Minimum Numeric Character\n- One Minimum Special Character\n\n\n
\n\nCustom\n\n\n\nSelecting **Custom** auto-populates the password characters required based on characters as follows:- One Minimum Uppercase Character\n- One Minimum Lowercase Character\n- One Minimum Numeric Character\n- One Minimum Special Character\n You can also customize the **Password Policy Script** that is displayed.\n\n
\n\nAdvanced\n\n\n\nSelecting **Advanced** displays **Password Rule Script** and **Password Strength Script**. Based on your requirement you can customize these scripts.\n\n
**Note:** Password policy is applied based on the selected preset.\n\n5. Specify the fields described in the table:\n\n\n
\n\nField\n\n\n\nDescription\n\n
\n\nMinimum Password Length\n\n\n\nMinimum length of the password. This option is displayed for all the presets except **Advanced**.**Note:** **Minimum Password Length** is a required field and recommended setting it to a minimum of 8–10 characters.\n\n
\n\nMaximum Password Length\n\n\n\nMaximum length of the password. This option is displayed for all the presets except **Advanced**.**Note:** **Maximum Password Length** is an optional field and recommended to set it to a maximum 100 characters.\n\n
\n\nMinimum Uppercase Character\\(s\\)\n\n\n\nMinimum number of uppercase characters in the password, from 0 to 10.\n\n
\n\nMinimum Lowercase Character\\(s\\)\n\n\n\nMinimum lowercase characters in the password, from 0 to 10.\n\n
\n\nMinimum Numeric Character\\(s\\)\n\n\n\nMinimum numeric of characters in the password, from 0 to 10.\n\n
\n\nMinimum Special Character\\(s\\)\n\n\n\nMinimum number of special characters in the password, from 0 to 10.\n\n
\n\nIncluded Special Characters\n\n\n\nAllow a restricted set of special characters without any delimiter. For example, if you enter \"$,!\" users can only use \"$\" and \"!\" as special characters in the password. No other special characters can be used, and a password with other special characters is not allowed.\n\n
\n\nExcluded Special Characters\n\n\n\nAllow a restricted set of special characters without any delimiter. For example, when '@$!' is entered, users should not be able to use '@', '$' and '!' as special characters in their passwords.**Note:** This option is available if the glide.password\\_policy.use\\_excluded\\_special\\_char property is enabled.\n\n
\n\nDisallow User Data\n\n\n\nIt is enabled to disallow the user data.\n\n
6. In the Sequence Matching section, specify the **Sequence Length Threshold** and **Repetition Length Threshold**.\n\n **Note:**\n\n - Both the sequence length threshold and repetition length threshold can have a maximum of eight characters. These fields enable you to restrict weak combinations of passwords that have predictable and repeating sequences such as \"123456\", \"qwerty\", \"!@\\#$%^\", \"aaaaa\", and so on.\n - For **Default Strong**, the length for both sequence length threshold and repetition length threshold is selected as four characters.\n7. In the **Test Your Password** section, specify your password.\n\n8. Click **Test Your Password**.\n\n9. Once the password is valid, click **Submit** to submit the password.\n\n **Note:** Always test your password before submitting.\n\n\n"}}