# 4.18 Set up Password Policies

**Introduction:**&#x20;

The **Password Policy** in **ZTrust Admin Console** allows you to define rules for creating and managing secure passwords for all users in your organization. By setting up a password policy, you can ensure stronger security, meet compliance requirements, and reduce the chances of unauthorized access.

**Why Configure a Password Policy?**

Setting up a password policy helps you:

* **Improve Security** – Enforces strong passwords that are harder to guess.
* **Meet Compliance Needs** – Many organizations must follow strict password rotation and complexity rules.
* **Prevent Unauthorized Access** – Weak or reused passwords can be exploited; policies reduce this risk.
* **Automate Password Expiry** – Ensures users regularly update their passwords for better safety.

**Steps to Configure the Password Policy:**&#x20;

* Go to the Admin Console → Authentication section → Policies Tab →Password Policy

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FehZVji1gVJ7KBBtF4b4R%2Fimage.png?alt=media&#x26;token=4f73fd15-eaa4-4484-940c-973151c8aafa" alt=""><figcaption><p>Fig. 4.18.a: Navigating to Authentication ⇒ Policies ⇒ Password Policy</p></figcaption></figure>

* Click on the **Add Policy** dropdown and select the required policy
* After adding all desired policies, click **Save**.
* The policies are now **active** and will apply to **all existing and new users**.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2Fda2SVC1wy7YfZ8dX3Tku%2Fimage.png?alt=media&#x26;token=0539e20b-823c-4ef6-8717-6bf079931f73" alt=""><figcaption><p>Fig. 4.18.b: Adding the password policies for the realm</p></figcaption></figure>

**Example Password Policy setup:**

| **Policy**           | **Value** | **Effect**                                |
| -------------------- | --------- | ----------------------------------------- |
| Expire Password      | `90 days` | Passwords expire every 90 days.           |
| Minimum Length       | `8`       | At least 8 characters required.           |
| Maximum Length       | 20        | At least 20 characters required.          |
| Uppercase Characters | `1`       | Must include at least 1 uppercase letter. |
| Lower characters     | 1         | Must include at lease 1 lowercase letter  |
| Digit                | 1         | At least 1 Digit required                 |
| Special Characters   | `1`       | Must include at least 1 special symbol.   |
| Not Recently Used    | `3`       | Cannot reuse last 3 passwords.            |

\\
