Chapter 28. Defining Password Policies

A password policy is a set of rules that passwords must meet.

For example, a password policy can define minimum password length and maximum password lifetime. All users affected by such a policy are required to set a sufficiently long password and change it frequently enough.

Password policies help reduce the risk of someone discovering and misusing a user's password.