Silent Migration and Password strength

[Alois.Goeth]

I’m currently implementing a silent migration of our customers to Auth0. What happens if an account in the old identity provider has a password that is weaker than the password policies configured in Auth0?

I found this old article. Is it still up to date?

Does automatic migration to Auth0 requires to loosen password strength policy for existing users with weak passwords?

We are implementing Auth0 authentication for our service that exists a few years and uses a custom database that we want to substitute with Auth0 solution. It’s not live yet, but when we finish all the work needed, we are going to migrate existing users to Auth0 database. For new users, we want to force them creating strong passwords, although existing ones might already have weaker combinations, and this I see as a possible problem. We would like to make the migration for all users without any …

[remus.ivan]

Hi @Alois.Goeth,

Welcome to the Auth0 Community!

This is not a concern when migrating users, so the password policies configured in Auth0 do not apply to imported users. You can check out more in this article - Password Strength Validation Effect on User Import.

I hope this helps and if you further questions please let me know!
Best regards,
Remus

[Alois.Goeth]

Thank you for the quick response. That is exactly what I wanted to know.

[remus.ivan]

Hi @Alois.Goeth,

You are more than welcome anytime!
Have a grea one,
Remus