Password reset ignores password strength and length

Hi @Enin, I’ve been unable to reproduce this behaviour on my end. One thing to check is if you have multiple database connections enabled - when requesting the password reset, ensure that it is being requested for a user in the connection with the Password Strength policy applied.

It would also be worth checking if you have customized the password reset page, which could be affecting the password policy validation in the widget.