> For the complete documentation index, see [llms.txt](https://olddocs.exivity.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://olddocs.exivity.io/security/password-policy.md).

# Password policy

Password complexity is configurable through a system-wide password policy setting. Exivity supports the following policies:

| Policy                                 | Rules                                                                                                                         |
| -------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------- |
| *Length check*                         | Passwords must be at least 8 characters long.                                                                                 |
| *Length and dictionary check*          | Must pass rules above. Passwords must not be among the most common passwords (top 50.000).                                    |
| *Length, dictionary and entropy check* | Must pass rules above. Passwords must have a [Shannon entropy](https://www.shannonentropy.netmark.pl/) value of at least 3.5. |

To apply your desired password policy: 

1.  Go to **Administration > Settings > System**
2.  Select your choice from the dropdown menu:

![Password policy configuration](/files/Pt8SNugsx8pvzUyVO1Pq)

&#x20;3\.  Click **Update** to apply your changes.<br>