# Password complexity

> :::note
Editing the **Password complexity** settings does not affect existing passwords.
:::

:::note
Editing the **Password complexity** settings does not affect existing passwords.
:::

The following table describes the password complexity you need when creating a password:

| **Field** | **Description** |
| --- | --- |
| **Special characters** | Select to force users to include at least one special character in their password.By default, this checkbox is not selected. |
| **Lowercase characters** | Select to force users to include at least one lowercase character in their password.By default, this checkbox is selected. |
| **Uppercase characters** | Select to force users to include at least one uppercase character in their password.By default, this checkbox is not selected. |
| **Digits** | Select to force users to include at least one digit in their password.By default, this checkbox is selected. |
| **Minimum password length** | Specify the minimum number of characters a password should contain.By default, it is 8. The length cannot be smaller than 1 or greater than 256 characters. |
| **Days before password expiration** | Specify the number of days for which the password is available. After this period, the password expires and needs to be changed.The minimum accepted value is 0 (the password never expires), and the maximum is 1000 days. |
| **Number of times a password can be reused** | The minimum accepted value is 0 (never allow reusing a password), while the maximum is 10. |
| **Change password on the first login** | If set to **Required**, users that log in for the first time must change their password before being allowed to access Orchestrator.If set to **Not required**, users can log in and continue to use the admin-defined password until it expires. |