> For the complete documentation index, see [llms.txt](https://docs.securepass.me/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.securepass.me/documentation/admin-user-guide/configure-mfa/configuring-password-authentication.md).

# Configuring password authentication

Methods that carry their own rules have a **Configure** button. Password is the fullest example, and the rest of this section walks through it.

Click **Configure** on the **Password** card.

![The Configure button on a method card.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/UNMcK6mMwkbhuvkcxtcW/assets/image6.png)

**Password Authentication Management** opens, listing every user registered for that method.

![Password Authentication Management.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/rE9NpfJRZTMkyEjNMwvz/assets/image7.png)

| Column              | Contains                                 |
| ------------------- | ---------------------------------------- |
| **User Name**       | The user's login identifier              |
| **Email**           | Their registered email address           |
| **Status**          | Whether the registration is active       |
| **Registered Date** | When the user registered for this method |
| **Actions**         | Reset password, and deregister           |

Two buttons sit at the top right: **Configure Policy** and **Bulk Reset**.

{% stepper %}
{% step %}

## Set the password policy

Click **Configure Policy**.

![The Configure Policy button.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/I4NoAiHXjpqR3dWejM61/assets/image8.png)

### Length and character requirements

![Password Configuration — length and character requirements.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/1uhVAcFBut3qhi8wRweA/assets/image9.png)

| Setting                                                    | What it does                                        |
| ---------------------------------------------------------- | --------------------------------------------------- |
| **Minimum Length** / **Maximum Length**                    | The permitted password length range                 |
| **Special Characters**                                     | Minimum count of special characters                 |
| **Numbers**                                                | Minimum count of digits                             |
| **Uppercase Letters**                                      | Minimum count of capitals                           |
| **Lowercase Letters**                                      | Minimum count of lowercase letters                  |
| **Change password periodically at specific time interval** | Forces users to change their password on a schedule |

### Exclusion list

Below the character requirements is the **Password Exclusion List** — patterns a password may not use.

![The Password Exclusion List.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/ndIfESPb4DKkgKKTa7IA/assets/imagea.png)

* Reject non-ASCII characters (foreign language characters)
* Reject passwords without a numeric character between alphabets
* Reject passwords that begin with a number
* Reject passwords that end with a number
* Reject passwords that begin with a special character
* Reject passwords that end with a special character
* Reject passwords that contain the username
* Reject passwords that contain any part of the user's full name
* Reject passwords that contain 3 consecutive characters from username and full name
* Dictionary — reject passwords that contain dictionary words
* Disallow consecutive identical characters
* Disallow unique password

Click **Save**. The policy applies from that point on.
{% endstep %}

{% step %}

## Reset passwords in bulk

Click **Bulk Reset**.

![The Bulk Reset button.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/RjALEABHOYu0LNr2vekV/assets/imageb.png)

![The Bulk Reset Passwords dialog.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/gO6UA0IxJ46GhT9EOYe8/assets/imagec.png)

Choose who to reset: **All users**, **All active users**, **All inactive users**, or **Selected users**.

Each user gets a new random, policy-compliant password emailed to them. **Passwords are not shown for bulk resets** — there is no list to copy afterwards.

Click **Reset**.
{% endstep %}

{% step %}

## Manage an individual user

Each row in the user list carries two actions.

![The Actions column in Password Authentication Management.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/E7mfwuHuKLxMXCU4t6UE/assets/imaged.png)

### Reset a user's password

Click the **key** icon.

![The Reset Password dialog.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/7EEx78TRRHSaFSiYXSMO/assets/imagee.png)

You have two options.

![Generating a random password.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/4GNXc7nt654srM9xrlbB/assets/imagef.png)

**Generate a random password (recommended)** — SECUREpass creates a policy-compliant password and emails it to the user.

![Setting a specific password.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/mBWuPv2tob3LADsqX0zq/assets/image10.png)

**Set a specific password** — you type the password yourself. It must meet the password policy set in section 5.

Click **Reset Password**.

### Deregister a user

The **bin** icon deregisters the user from Password authentication. They will not be able to sign in with a password until they register for it again.
{% endstep %}
{% endstepper %}