Configuring password update settings

Configuring password update settings include enabling self-service password updates and setting up strength requirements for newly created passwords.

1. In the Admin Console, go to People > Settings > Registration Settings.
2. Under Security, in the Password Strength Check section, specify how strong each user password must be.

   You can select one of the predefined options or select Use custom password parameters and set the following requirements:

   Parameter	Description	Default
   Max length	The maximum length of a password.	128
   Min length	The minimum length of a password.	12
   Uppercase	The minimum number of Latin uppercase letters [A-Z] in a password.	1
   Lowercase	The minimum number of Latin lowercase letters [a-z] in a password.	1
   Numerals	The minimum number of digits 0-9 in a password.	1
   Special characters	The minimum number of special characters (for example, !, @, or %) in a password.	1
   Characters that must be changed from old password	The minimum number of symbols that must be changed from an old password when updating a password.	1

3. In the Human Input Validation section, select Enabled to present a captcha to users.
4. Click Save Settings.
5. Go to People > Settings > Password Reset.
6. Under Password Resetting Status, select Enabled.
   This enables user to change their passwords themselves.
7. Click Save Settings.
8. Go to System > Settings > Password Control.
9. Under Password Reuse, select Enabled.
10. In Max history, specify the number of passwords after which the passwords may be reused.