# Set the password policy

To set password rules, open Manage Domain(s), expand your domain and click Policy. In the PASSWORD POLICY box, switch on the character types users must include, enter the Minimum Password Length, and choose when passwords must be changed. Click Save. The length must be greater than 2 and less than 21 characters.

## How to set the password policy

1. Open **Manage Domain(s)**, expand your domain and click **Policy**.
2. In **PASSWORD POLICY**, switch **Capital Letter**, **Numeric Letter** and **Special Letter** to **Yes** for the types every password must contain.
3. Enter the **Minimum Password Length**.
4. Under the change-interval rules, switch on **First Login after creation of the account**, **Every**, or both. For **Every**, set the number of months.
5. Click **Save** at the bottom of the page.

## Fields

| Field | What it does | Limits |
|---|---|---|
| **Capital Letter** | Passwords must contain at least one capital letter (A to Z). | Yes or No |
| **Numeric Letter** | Passwords must contain at least one digit (0 to 9). | Yes or No |
| **Special Letter** | Passwords must contain at least one special character. | Yes or No |
| **Minimum Password Length** | The shortest password allowed. | A number greater than 2. The on-screen note says less than 21 characters. |
| **First Login after creation of the account** | The user must change the password the first time they sign in. | Yes or No |
| **Every** (months) | The user must change the password every set number of months. | Yes or No, then a whole number greater than zero |

## Example

> Rohit sets **Capital Letter**, **Numeric Letter** and **Special Letter** to **Yes**, **Minimum Password Length** to 10, and **Every** 3 months. New staff at `acme.in` also change the first password when they sign in.

## Good to know

- When **Every** is **No**, the months box stays greyed out.
- The rules apply to the domain you opened.

## Common questions

**Which special characters count?**

The admin console lists the asterisk, exclamation mark, underscore, colon, vertical bar, caret and at sign as the special characters in its password prompts.

**Can I set a one-character minimum?**

No. The page refuses a minimum length below 3 and shows a message.


Source: https://docs.xgenplus.com/admin/password-policy/