{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":48530,"path":"servicenow-platform/password-reset/config-pwd-strength-rqmts.md","title":"Configure the required strength for passwords","bundle":null,"doc_type":null,"release":"australia","body":"\n# Configure the required strength for passwords\n\nThe password that a user defines must meet certain requirements — for example, it must contain at least 12 characters, it must include a numeral, and so on. You can configure the requirements as needed for your organization.\n\n## Before you begin\n\nRole required: password\\_reset\\_admin\n\n## About this task\n\nThe base system includes example credential stores with various password requirements. You can modify password requirements and provide users with hints for creating a password. The default requirements are:\n\n-   At least eight characters\n-   At least one uppercase and one lower case letter\n-   At least one numeral\n\n**Note:** In addition to configuring password strength requirements, you can configure several other settings for the credential store, as described in [Configure the connection to a credential store for the Password Reset processes](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/servicenow-platform/password-reset/t_CreateACredentialStore.md).\n\n## Procedure\n\n1.  Navigate to **All** &gt; **Password Reset** &gt; **Credential Stores**.\n\n2.  Select the credential store in the list and then configure the following settings:\n\n<table><thead><tr><th>\n\nField\n\n</th><th>\n\nDescription\n\n</th></tr></thead><tbody><tr><td>\n\nPassword rule hint\n\n</td><td>\n\nSpecify the text that appears on the password reset page to help the user to create a password that meets all requirements. The **Password rule** script enforces the requirements.**Note:** The Password Reset Windows Application supports newline characters in the hint. Other formatting is not supported \\(bold, underline, hyperlink, and so on\\).\n\n</td></tr><tr><td>\n\nPassword rule\n\n</td><td>\n\nSpecify the client script that validates the new password that the user enters. The script is invoked when the user enters a new password and clicks **Password Reset**. You can use the script to enforce password strength/complexity requirements.\n\n</td></tr><tr><td>\n\nEnable Password Strength\n\n</td><td>\n\nSelect the check box to:-   Display the text box for the **Strength rule** script so you can update the script.\n-   Display the graphical **Password Strength** bar to the user while the user changes or resets the password.\n **Note:** The Password Reset Windows Application does not support Password Strength.\n\n</td></tr><tr><td>\n\nStrength rule\n\n</td><td>\n\nThis text box appears only if you select **Enable Password Strength**.Specify the client script that calculates the strength/complexity of the password that the user enters. The script is invoked when the user begins to enter a new password during the reset process.\n\nDefault settings:-   Selected for local ServiceNow credential stores\n-   Not selected for other credential stores\n **Note:**\n\n-   To guide the user during the reset process, the system displays a graphical bar labeled **Password Strength** under the **New password** field.\n\n\\[Omitted image \"password-strength.png\"\\] Alt text: Password strength indicator\n\n-   The Password Reset Windows Application does not support Password Strength.\n\n\n</td></tr></tbody>\n</table>3.  Click **Submit**.\n\n    You should test the connection to a credential store after you configure a new credential store or when users experience problems that might involve the connection.\n\n4.  Navigate to **Password Reset** &gt; **Credential Stores** and then open the credential store.\n\n5.  In the header bar, click **Save and Test Connection**.\n\n    A progress page displays the result of the test.\n\n\n**Parent Topic:**[Configure your Password Reset process](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/servicenow-platform/password-reset/t_CreateAPasswordResetProcess.md)\n\n**Related topics**  \n\n\n[Calculating the security score for password reset process]()\n\n[Configure password expiration reminder]()\n\n[Credential stores for Password Reset]()\n\n[Password Reset verifications]()\n\n[Configure your Password Reset process to auto-enroll users]()\n\n[Enable users to enroll for Password Reset]()\n\n[Configure Password Reset properties]()\n\n[Send email to remind users to enroll for Password Reset]()\n\n[Specify lockout for failed login attempts]()\n\n[Configure Google reCAPTCHA for the password reset process]()\n\n"}}