---
updatedAt: 2026-09-21T19:56:03.000Z
agentTools:
projectIndex: https://docs.wristband.dev/llms.txt
---
# Passwords
Set up password login and password policies for the Wristband Identity Provider.
Password login enables users to authenticate by entering a login identifier (e.g., email address) and password on the sign-in page.
## Enabling Password Login
Configure the Wristband IdP login factors by navigating to **Identity Providers** → **Wristband** within the Application View of the Wristband Dashboard. The **Supported Login Factors** setting controls the available options on your sign-in screen.
* **Enable Passwords:** Passwords are enabled by default; however, you can manually activate them by setting **Supported Login Factors** to either **Only enter a password** or **Choose either a password or magic link**.
* **Set the Default View:** If you choose the hybrid approach (both password and magic link enabled), users can toggle between them on the sign-in screen. Use the **Primary Login Factor** setting to dictate which method loads first.
## Password Policies
To enforce password complexity and credential requirements, manage your settings under **Security** → **Password Policies** in the Application View of your dashboard.
You can configure your password rules using the settings outlined below:
* **Minimum Password Length:** Defines the lowest number of characters allowed for a user password. This value must be between **8** and **64 **characters and defaults to **8**.
* **Require Lowercase Character:** When enabled, passwords must contain at least one lowercase letter \[a-z].
* **Require Uppercase Character:** When enabled, passwords must contain at least one uppercase letter \[A-Z].
* **Require Numeric Digit:** When enabled, passwords must contain at least one non-alphanumeric character (e.g., `!`, `#`, `$`, `%`, `&`).
* **Require Special Character:** When enabled, passwords must contain at least one special character (e.g., `!`, `#`, `$`, `%`, `&`).
* **Password Breach Detection:** Enable this setting to block weak or leaked credentials. Wristband cross-references all password creation and authentication attempts with global data breach registries.
* **Force Reset on Breached Password:** Mandate password updates for exposed accounts by turning this setting on (requires **Breach Detection** to be enabled). Active enforcement prevents users from logging in using leaked credentials until they change their password, while disabling it allows them to bypass the warning and authenticate anyway.
### Tenant-Level Override
To customize password requirements for an individual customer, apply a tenant-level override:
1. **Select** **the target tenant** from the dropdown menu in the Application View.
2. Navigate to **Security** → **Password Policies**.
3. Open the **Edit Tenant Config** tab.
4. Switch on the **tenant override** toggle to define unique password complexity rules for this tenant.
{`
`}