PasswordPolicy

The rules a password must meet: how short, how long, and whether to check breached lists.

Use it in sign-in settings. It follows NIST's guidance, so there are no rules about capitals or symbols, and passwords don't expire.

Shape

Its parts keep these rules, and a value that breaks one fails with the rule's name:

• min_not_above_max: min_length <= max_length

Example

PasswordPolicy { min_length: 15 max_length: 64 check_breached: true }

Good to know

• The fewest is at least 8, and the most is at least 64.
• == tells you whether two are the same. < and list.sort_by don't take it, so sort by one of its parts instead.

In JSON

An object of its parts, in a request, a response or json.write:

{"min_length":15,"max_length":64,"check_breached":true}{"min_length":8,"max_length":256,"check_breached":false}

Details