> ## Documentation Index > Fetch the complete documentation index at: https://domoinc-openapi-sync-dataflows.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # Setting Password Requirements ## Intro You can set password requirements for Domo to enforce when users create or change passwords. You can only do this if you have an "Admin" default security role or a custom role with "Manage All Company Settings" enabled. For more information about default security roles, see [Managing Custom Roles](/s/article/360043438973 "Security Role Reference"). To set user password requirements, do the following: 1. In the navigation header, select **More** **> Admin**. The **Admin Settings** displays. 2. Select **Authentication** > **Authentication**. 3. Set the password requirements you want when users create or change passwords. **Tip:** Set reasonable password requirements, keeping in mind that users accessing Domo on a mobile device sign in using a keypad. 4. Select **Save**. Password requirements you can set include the following:

Name	Description
Enable password length check	Sets whether Domo checks password length. When enabled, the Minimum Password Length field displays, which sets the minimum number of characters that passwords must contain.
Must contain UPPERCASE characters (A-Z)	Sets whether passwords must contain uppercase characters.
Must contain lowercase characters (a-z)	Sets whether passwords must contain lowercase characters.
Must contain digits (0-9)	Sets whether passwords must contain numbers.
Must contain non-alphanumeric characters (!,@,#,&)	Sets whether passwords must contain characters besides alphabet and number characters.
Enable account lock	Sets whether Domo allows account locking. When enabled, the Accounts lock after # invalid login attempts field displays, which sets the number of invalid attempts to sign in before the account is locked.
Enable password expiration	Sets whether Domo allows account locking. When enabled, the Passwords expire in # days field displays, which sets the number of days after passwords are created or changed when users must change their password. Users are prompted to change their password before it expires (daily, 14 days before expiration).

## Password Blocklist (Beta) Enterprise customers can restrict their users from using specific passwords by creating a blocklist. This can be valuable if you've had unauthorized credential usage and to limit use of passwords commonly assigned within your organization. Entries in the blocklist include passwords that do not meet the requirements you set, as mentioned above, and a growing list of the most commonly used global passwords. Entries within the blocklist are not permitted when a user creates or changes their password, but they do not impact passwords currently in use. These settings only apply to Domo accounts passwords and do not impact your IdP account. If you are interested in this feature, please contact your Customer Success Manager (CSM).