# What is Enhanced Password Protection?

**URL:** <https://community.auth0.com/t/what-is-enhanced-password-protection/98514>\
**Category:** Get Help\
**Tags:** user-password-management, user-management\
**Created:** [January 19, 2023, 6:49pm UTC](https://community.auth0.com/t/what-is-enhanced-password-protection/98514 "2023-01-19T18:49:49Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![craig.burton](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/craig.burton/32/41222_2.png) [@craig.burton](https://community.auth0.com/u/craig.burton)\
**Post date:** [January 19, 2023, 6:49pm UTC](https://community.auth0.com/t/what-is-enhanced-password-protection/98514/1 "2023-01-19T18:49:49Z")

</div>

In the plan feature comparison, it lists _Enhanced Password Protection_ which links through to [Password Strength in Auth0 Database Connections](https://auth0.com/docs/authenticate/database-connections/password-strength) and seems to match what the tooltip says. However, this is listed as _not_ available for Free tier plans (and also not for B2C Essentials), yet I can set password strength et al on the free plan we’re testing with (_not_ a trial of pro or enterprise).

Is _Enhanced Password Protection_ something different to the password strength controls (if so, what?) or is it now available on all plans, or…?

Many thanks, Craig

---

<div class="post-metadata">

**Author:** ![lihua.zhang](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/lihua.zhang/32/39683_2.png) [@lihua.zhang](https://community.auth0.com/u/lihua.zhang)\
**Post date:** [January 19, 2023, 9:46pm UTC](https://community.auth0.com/t/what-is-enhanced-password-protection/98514/4 "2023-01-19T21:46:58Z")

</div>

Hi @craig.burton ,

I have reached out to our internal team regarding this query and will keep you updated once hearing from them. Thanks!

---

<div class="post-metadata">

**Author:** ![craig.burton](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/craig.burton/32/41222_2.png) [@craig.burton](https://community.auth0.com/u/craig.burton)\
**Post date:** [January 24, 2023, 9:47am UTC](https://community.auth0.com/t/what-is-enhanced-password-protection/98514/5 "2023-01-24T09:47:05Z")

</div>

Hi @lihua.zhang - did you get anything definitive from the team on what the _Enhanced Password Protection_ covers or whether the password strength/history/dictionary settings (for database authentication) are available on all plans or not?

Thanks, Craig

---

<div class="post-metadata">

**Author:** ![lihua.zhang](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/lihua.zhang/32/39683_2.png) [@lihua.zhang](https://community.auth0.com/u/lihua.zhang)\
**Post date:** [January 24, 2023, 4:46pm UTC](https://community.auth0.com/t/what-is-enhanced-password-protection/98514/7 "2023-01-24T16:46:59Z")

</div>

Hi @craig.burton ,

I have not received updates about this query yet and just followed up again. Once the info is available, I will let you know. Appreciate your continued patience.

---

<div class="post-metadata">

**Author:** ![craig.burton](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/craig.burton/32/41222_2.png) [@craig.burton](https://community.auth0.com/u/craig.burton)\
**Post date:** [February 16, 2023, 9:29am UTC](https://community.auth0.com/t/what-is-enhanced-password-protection/98514/8 "2023-02-16T09:29:28Z")

</div>

Hi @lihua.zhang

I’ve had a response on this via email from Spencer Painter. I’ll leave it here for anyone else checking for this:

> Password policies such as length and complexity of password are available on the free/B2C essentials plan.
> 
> Enhanced Password Protection refers to breached password detection, and Credential Guard which will let a user know they are using a known leaked password.  
> [Breached Password Detection](https://auth0.com/docs/secure/attack-protection/breached-password-detection)
> 
> To get this feature along with Credential Guard you would need an Enterprise plan.

Thanks for your help,

Craig

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [February 16, 2023, 12:53pm UTC](https://community.auth0.com/t/what-is-enhanced-password-protection/98514/9 "2023-02-16T12:53:45Z")

</div>

No problem! Thanks for sharing it with the rest of community as well!

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [March 2, 2023, 12:54pm UTC](https://community.auth0.com/t/what-is-enhanced-password-protection/98514/10 "2023-03-02T12:54:31Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
