# \#password-policy

**URL:** https://community.auth0.com/tag/password-policy/658.md

[Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md)

---

## [Password Dictionary Protection not working as expected for password reset](https://community.auth0.com/t/password-dictionary-protection-not-working-as-expected-for-password-reset/93347)

<div class="topic-metadata">

**Author:** [@steven.palumbo](https://community.auth0.com/u/steven.palumbo)\
**Replies:** 4\
**Last updated:** [October 31, 2022, 10:35pm UTC](https://community.auth0.com/t/password-dictionary-protection-not-working-as-expected-for-password-reset/93347 "2022-10-31T22:35:08Z")

</div>

Greetings! I have configured my tenant to enforce “Password Dictionary” protection. I have not added any custom entries so I am relying on the default Auth0 dictionary for enforcement. The issue I’m running into is …

---

## [How to get password policy for custom login form?](https://community.auth0.com/t/how-to-get-password-policy-for-custom-login-form/75320)

<div class="topic-metadata">

**Author:** [@shubham.negi](https://community.auth0.com/u/shubham.negi)\
**Replies:** 1\
**Last updated:** [December 23, 2021, 5:19pm UTC](https://community.auth0.com/t/how-to-get-password-policy-for-custom-login-form/75320 "2021-12-23T17:19:09Z")

</div>

When password does not matches the policy criteria on submit of sign-up form, webAuth.redirect.signupAndLogin API call checks password policy and calls displayError with message. But this validation happens only when we …

---

## [Enable all character types of the password strength policy](https://community.auth0.com/t/enable-all-character-types-of-the-password-strength-policy/55212)

<div class="topic-metadata">

**Author:** [@eric.hu](https://community.auth0.com/u/eric.hu)\
**Replies:** 3\
**Last updated:** [October 25, 2021, 1:59pm UTC](https://community.auth0.com/t/enable-all-character-types-of-the-password-strength-policy/55212 "2021-10-25T13:59:16Z")

</div>

Hello, I’m currently configuring the password strength of a DB Connection, I enabled to Good strength but couldn’t force the user to use all characters types, only 3 of 4. So I was wondering what’s the point of increas…

---

## [Enable Password Policy for Custom HTML Signup Page](https://community.auth0.com/t/enable-password-policy-for-custom-html-signup-page/46063)

<div class="topic-metadata">

**Author:** [@preethi.ramiah](https://community.auth0.com/u/preethi.ramiah)\
**Replies:** 1\
**Last updated:** [July 10, 2020, 5:12pm UTC](https://community.auth0.com/t/enable-password-policy-for-custom-html-signup-page/46063 "2020-07-10T17:12:53Z")

</div>

Has anyone implemented password policy checking for custom HTML signup page?

---

## [Will updating my password policy affect legacy users?](https://community.auth0.com/t/will-updating-my-password-policy-affect-legacy-users/15626)

<div class="topic-metadata">

**Author:** [@justin.beals](https://community.auth0.com/u/justin.beals)\
**Replies:** 1\
**Last updated:** [September 19, 2018, 1:20pm UTC](https://community.auth0.com/t/will-updating-my-password-policy-affect-legacy-users/15626 "2018-09-19T13:20:01Z")

</div>

I want to update our database connection for the password policy to go from Low to Fair. What will happen to my users whose current password does not match the new policy? Will they be able to continue to login with th…

---

## [Unexpected difference between create user response and signup response for weak password](https://community.auth0.com/t/unexpected-difference-between-create-user-response-and-signup-response-for-weak-password/9432)

<div class="topic-metadata">

**Author:** [@ofer.yaniv](https://community.auth0.com/u/ofer.yaniv)\
**Replies:** 1\
**Last updated:** [December 17, 2018, 3:20pm UTC](https://community.auth0.com/t/unexpected-difference-between-create-user-response-and-signup-response-for-weak-password/9432 "2018-12-17T15:20:59Z")

</div>

I would like to report on unexpected difference between “create user” response and “signup” response for weak password. We are integrating auth0 as an OAuth2.0 Identity Provider at our Java backend server. We are using…

---

## [Custom Password Policy on Auth0 Database](https://community.auth0.com/t/custom-password-policy-on-auth0-database/8983)

<div class="topic-metadata">

**Author:** [@serafino.messina](https://community.auth0.com/u/serafino.messina)\
**Replies:** 1\
**Last updated:** [December 14, 2017, 9:04pm UTC](https://community.auth0.com/t/custom-password-policy-on-auth0-database/8983 "2017-12-14T21:04:08Z")

</div>

Is there a way to implement custom password policies for an Auth0 Database? I’ve tried to match my needs with what Auth0 offers in the Connections \> Database \> Password Policy tab but it’s not enough and/or is different…
