{
  "schema_version": 2,
  "id": "operate/rs/security/access-control/manage-passwords",
  "title": "Set password policies",
  "url": "https://redis.io/docs/latest/operate/rs/security/access-control/manage-passwords/",
  "summary": "Set password policies.",
  "tags": [
    "docs",
    "operate",
    "rs"
  ],
  "last_updated": "2026-09-24T09:16:28+01:00",
  "children": [
    {
      "id": "operate/rs/security/access-control/manage-passwords/password-complexity-rules",
      "summary": "Enable password complexity rules and configure minimum password length.",
      "title": "Configure password complexity rules",
      "url": "https://redis.io/docs/latest/operate/rs/security/access-control/manage-passwords/password-complexity-rules/"
    },
    {
      "id": "operate/rs/security/access-control/manage-passwords/password-expiration",
      "summary": "Configure password expiration to enforce expiration of a user's password after a specified number of days.",
      "title": "Configure password expiration",
      "url": "https://redis.io/docs/latest/operate/rs/security/access-control/manage-passwords/password-expiration/"
    },
    {
      "id": "operate/rs/security/access-control/manage-passwords/rotate-passwords",
      "summary": "Rotate user passwords.",
      "title": "Rotate passwords",
      "url": "https://redis.io/docs/latest/operate/rs/security/access-control/manage-passwords/rotate-passwords/"
    },
    {
      "id": "operate/rs/security/access-control/manage-passwords/active-active-admin-credentials",
      "summary": "Update admin credentials for Active-Active databases.",
      "title": "Update admin credentials for Active-Active databases",
      "url": "https://redis.io/docs/latest/operate/rs/security/access-control/manage-passwords/active-active-admin-credentials/"
    },
    {
      "id": "operate/rs/security/access-control/manage-passwords/password-hashing-algorithm",
      "summary": "Change the password hashing algorithm for user passwords in a Redis Software cluster.",
      "title": "Change the password hashing algorithm",
      "url": "https://redis.io/docs/latest/operate/rs/security/access-control/manage-passwords/password-hashing-algorithm/"
    }
  ],
  "page_type": "content",
  "content_hash": "bb37a6cec498a0e3c49f7b8a7ba248ce2efe78dfe8e730223c3e6d987b2861e8",
  "sections": [
    {
      "id": "content",
      "title": "Content",
      "role": "content",
      "text": "Redis Software provides several ways to manage the passwords of local accounts, including:\n\n- [Password complexity rules](https://redis.io/docs/latest/operate/rs/security/access-control/manage-passwords/password-complexity-rules)\n\n- [Password expiration](https://redis.io/docs/latest/operate/rs/security/access-control/manage-passwords/password-expiration)\n\n- [Password rotation](https://redis.io/docs/latest/operate/rs/security/access-control/manage-passwords/rotate-passwords)\n\nYou can also manage a user's ability to [sign in](https://redis.io/docs/latest/operate/rs/security/access-control/manage-users/login-lockout#user-login-lockout) and control [session timeout](https://redis.io/docs/latest/operate/rs/security/access-control/manage-users/login-lockout#session-timeout).\n\nTo enforce more advanced password policies, we recommend using [LDAP integration](https://redis.io/docs/latest/operate/rs/security/access-control/ldap) with an external identity provider, such as Active Directory.\n\n> [!NOTE]\n> Redis Software securely stores all user passwords using a cryptographic hash function. The default password hashing algorithm is `SHA-256`, but you can [change the password hashing algorithm](https://redis.io/docs/latest/operate/rs/security/access-control/manage-passwords/password-hashing-algorithm) to `PBKDF2` as of Redis Software version 7.8.6-13."
    }
  ],
  "examples": []
}