IBM Cloud Docs
Password Policy Options

Password Policy Options

The following user password policy options are supported. These can be configured via the relevant user management commands. Duration-based values are specified in minutes (converted internally from seconds).

Note: If not provided, the following enforced minimums apply:

  • minimum_length: 8 characters
  • max_attempts: 3 attempts

Supported Policy Options

minimum_length

Specifies the minimum number of characters required for a valid password.

max_attempts

Defines the maximum number of failed login attempts allowed before the user is locked out.

Password Expiration

Specifies the number of days after which a password will expire and require the user to set a new one.

Lock Duration

Specifies the duration (in minutes) a user remains locked out before being automatically unlocked, based on the time the account was locked.

Password Failure Interval

Defines the time window (in minutes) for tracking failed login attempts. If the user's last failed attempt falls outside this interval, the failure count is reset. The failure count does not reset if the user is locked out and requires admin intervention to unlock the user.

Password History

Specifies the number of previously used passwords that cannot be reused by the user. Previously used passwords are not tracked unless Password History is enabled.

User Examples

Creating New Policy

  • The following image shows when a user creates a new policy title

Policy Showing in the List

  • The following image shows when the new policy is displayed in the list title

Create User with New Policy

  • The following image shows when a new user is created and is placed under the new policy title