---
title: "Rocket Chat Password Policy and History Settings"
slug: "set-password-policy-and-history"
description: "Configure password policy and history in Rocket Chat. Strengthen secure access, identity controls, and compliance across deployments."
updated: 2026-09-04T13:57:30Z
published: 2026-09-04T13:57:30Z
canonical: "docs.rocket.chat/set-password-policy-and-history"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.rocket.chat/llms.txt
> Use this file to discover all available pages before exploring further.

# Set Password Policy and History

You can enforce password rules in your Rocket.Chat workspace to ensure users create strong and unique passwords. This is one of the quickest ways to protect accounts and identities.

> [!NOTE]
> Only [workspace administrators](/v1/docs/roles-in-rocketchat#rocketchat-administrator-role) can configure password policies.

## Configure password policy

To configure password policies, go to **Manage → Workspace → Settings → Accounts → Password Policy**. When enabled, all new passwords must comply with the configured rules. Existing passwords are not affected.

You can then configure the following options:

| Setting | Description |
| --- | --- |
| **Enable Password Policy** | Require new passwords to follow the configured rules. |
| **Minimum Length** | Minimum number of characters required. Set to `-1` to disable. The default value is `14`. |
| **Maximum Length** | Maximum number of characters allowed. Set to `-1` to disable. The default value is `-1` (no maximum). |
| **Forbid Repeating Characters** | Prevents users from using the same character repeatedly in sequence. |
| **Max Repeating Characters** | Number of times a character can repeat before it’s disallowed. (Default: 3) |
| **At Least One Lowercase** | Requires at least one lowercase letter. |
| **At Least One Uppercase** | Requires at least one uppercase letter. |
| **At Least One Number** | Requires at least one numerical digit. |
| **At Least One Symbol** | Requires at least one special character (for example: `! @ # $ %`). |
| **Restore defaults** | Click the button to return configurations to their default values. |

For example, an organization can set a strong password policy requiring:

- A minimum length of **12 characters**
- At least one uppercase letter, one lowercase letter, one number, and one symbol
- No more than three repeating characters in sequence

> [!WARNING]
> **From version 8.1.0, password policy settings are enabled by default in new workspaces. A minimum password length of 14 characters is required, with maximum three repeating characters, at least one lowercase letter, one uppercase letter, one number, and one symbol.**

## Set password history

You can prevent users from reusing their recently used passwords. To configure these settings, go to **Manage → Workspace → Settings → Accounts → Password History**.

| Setting | Description |
| --- | --- |
| **Enable Password History** | When enabled, users cannot update their password to one of their most recently used passwords. |
| **Password History Length** | Defines how many of the most recently used passwords are blocked from reuse. The default value is `5`. |

> [!NOTE]
> **You can also view your workspace’s password policy using the REST API:** [**Get Password Policy**](https://developer.rocket.chat/apidocs/get-password-policy)