Global Password Complexity Settings

For the default Membership provider, the complexity of the password is controlled by the following settings in the web.config file:

minimum required password length
minimum required non alpha numeric characters
password strength regular expression

web.config settings for password complexity:

Copy

<membership defaultProvider="SqlProvider"
    userIsOnlineTimeWindow = "20>
    <providers>
        <add name="CustomMembership"
        type="EBS.Core.Authentication.Providers.CustomMembership"
        connectionStringName="EbsSqlServer"
        ...
        minRequiredNonalphanumericCharacters="1"
        minRequiredPasswordLength="7"
        passwordStrengthRegularExpression="(?=.*[A-Z].*[A-Z])(?=.*[#@$*!&amp;])(?=.*[0-9].*[0-9])(?=.*[a-z].*[a-z].*[a-z])"
        />
     </providers>
</membership>

You can also customize the password complexity by using server scripting. For more information, see Customize Password Complexity Rules using Server Scripting.