By default, the password policy is disabled. Administrators must enable the policy to enforce the new rules. To enable the password policy, you must set at least one rule.
To enable password policy management:
The newly configured password policy rules are in effect.
Note: The existing current
password will still work to login to Address Manager.
The new password policy will be enforced when changing or
resetting the password. The new password policy rules will
appear as a hint when creating a new user and changing or
resetting user passwords.