# Avoiding words in Passwords

**URL:** <https://community.auth0.com/t/avoiding-words-in-passwords/10050>\
**Category:** Get Help\
**Tags:** password\
**Created:** [March 14, 2018, 8:33am UTC](https://community.auth0.com/t/avoiding-words-in-passwords/10050 "2018-03-14T08:33:46Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![DavidAdam](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/davidadam/32/9011_2.png) [@DavidAdam](https://community.auth0.com/u/DavidAdam)\
**Post date:** [March 14, 2018, 8:33am UTC](https://community.auth0.com/t/avoiding-words-in-passwords/10050/1 "2018-03-14T08:33:46Z")

</div>

I use software that uses Auth0 at least to validate passwords. As listed on this page: [Configure Password Policies in Auth0 Database Connections - Auth0 Docs](https://auth0.com/docs/connections/database/password-options#personal-data),  
users can be forced to avoid certain words in their password. Using the example on the page, as of now we couldn’t use the word “John” in a password but we could use joHn in a password.

Can validating a password be (custom) changed to have it avoid John whether a letter in that word is in lower case or in upper case? So “joHn” would be avoided as well?

Best,  
David

---

<div class="post-metadata">

**Author:** ![Karen](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/karen/32/8543_2.png) [@Karen](https://community.auth0.com/u/Karen)\
**Post date:** [March 22, 2018, 10:35pm UTC](https://community.auth0.com/t/avoiding-words-in-passwords/10050/3 "2018-03-22T22:35:01Z")

</div>

@DavidAdam Hello David! Thanks for reaching out. I tried to replicate the issue you were having, but i was not able to successfully reproduce it. When signing up, I created a username and then entered various cases of a password containing that username. I was not able to successfully sign up. I would recommend turning on the Personal Data Toggle under the Password Policy section for your database connection.

Cheers,  
Karen

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [April 3, 2018, 12:53pm UTC](https://community.auth0.com/t/avoiding-words-in-passwords/10050/4 "2018-04-03T12:53:52Z")

</div>

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.