{
  "schema_version": 2,
  "id": "operate/rs/security/access-control/manage-passwords/password-complexity-rules",
  "title": "Configure password complexity rules",
  "url": "https://redis.io/docs/latest/operate/rs/security/access-control/manage-passwords/password-complexity-rules/",
  "summary": "Enable password complexity rules and configure minimum password length.",
  "tags": [
    "docs",
    "operate",
    "rs"
  ],
  "last_updated": "2026-10-01T15:48:36+01:00",
  "page_type": "content",
  "content_hash": "1ae4026056f928735783146df9cd7f395ab79f434176c782c1515ba9cb51e825",
  "sections": [
    {
      "id": "overview",
      "title": "Overview",
      "role": "overview",
      "text": "Redis Software provides optional password complexity rules that meet common requirements.  When enabled, these rules require the password to have:\n\n- At least 8 characters\n- At least one uppercase character\n- At least one lowercase character\n- At least one number\n- At least one special character \n\nThese requirements reflect v6.2.12 and later. Earlier versions did not support numbers or special characters as the first or the last character of a password. This restriction was removed in v6.2.12.\n\nIn addition, the password:\n\n- Cannot contain the user's email address or the reverse of the email address.\n- Cannot have more than three repeating characters.\n\nPassword complexity rules apply when a new user account is created and when the password is changed.  Password complexity rules are not applied to accounts authenticated by an external identity provider."
    },
    {
      "id": "enable-password-complexity-rules",
      "title": "Enable password complexity rules",
      "role": "content",
      "text": "To enable password complexity rules, use one of the following methods:\n\n- Cluster Manager UI:\n\n    1. Go to **Cluster > Security > Preferences**, then select **Edit**.\n\n    1. In the **Password** section, enable **Complexity rules**.\n\n    1. Select **Save**.\n\n- [Update cluster](https://redis.io/docs/latest/operate/rs/references/rest-api/requests/cluster#put-cluster) REST API request:\n\n    [code example]"
    },
    {
      "id": "change-minimum-password-length",
      "title": "Change minimum password length",
      "role": "content",
      "text": "When password complexity rules are enabled, passwords must have at least 8 characters by default.\n\nIf you change the minimum password length, the new minimum is enforced for new users and when existing users change their passwords.\n\nTo change the minimum password length, use one of the following methods:\n\n- Cluster Manager UI:\n\n    1. Go to **Cluster > Security > Preferences**.\n    \n    1. Click **Edit**.\n\n    1. In the **Password** section, enable **Complexity rules**.\n\n    1. Set the number of characters for **Minimum password length**.\n\n        ![The minimum password length setting appears in the password section of the cluster security preferences screen when complexity rules are enabled.](https://redis.io/docs/latest/images/rs/screenshots/cluster/security-preferences-min-password-length.png)\n\n    1. Click **Save**.\n\n- [Update cluster](https://redis.io/docs/latest/operate/rs/references/rest-api/requests/cluster#put-cluster) REST API request:\n\n    [code example]"
    },
    {
      "id": "deactivate-password-complexity-rules",
      "title": "Deactivate password complexity rules",
      "role": "content",
      "text": "To deactivate password complexity rules, use one of the following methods:\n\n- Cluster Manager UI:\n\n    1. Go to **Cluster > Security > Preferences**, then select **Edit**.\n\n    1. In the **Password** section, turn off **Complexity rules**.\n\n    1. Select **Save**.\n\n- [Update cluster](https://redis.io/docs/latest/operate/rs/references/rest-api/requests/cluster#put-cluster) REST API request:\n\n    [code example]"
    }
  ],
  "examples": [
    {
      "id": "enable-password-complexity-rules-ex0",
      "language": "sh",
      "code": "PUT https://[host][:port]/v1/cluster\n    { \"password_complexity\": true }",
      "section_id": "enable-password-complexity-rules"
    },
    {
      "id": "change-minimum-password-length-ex0",
      "language": "sh",
      "code": "PUT https://[host][:port]/v1/cluster\n    { \"password_min_length\": <integer between 8-256> }",
      "section_id": "change-minimum-password-length"
    },
    {
      "id": "deactivate-password-complexity-rules-ex0",
      "language": "sh",
      "code": "PUT https://[host][:port]/v1/cluster\n    { \"password_complexity\": false }",
      "section_id": "deactivate-password-complexity-rules"
    }
  ]
}