# PasswordPolicyProperty

The password policy settings for a user pool, including complexity, history, and length requirements.

- Source: Generated code
- Type last changed: v2.154.0 · 22 Aug 2024

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_cognito as cognito } from 'aws-cdk-lib';
const passwordPolicyProperty: cognito.CfnUserPool.PasswordPolicyProperty = {
  minimumLength: 123,
  passwordHistorySize: 123,
  requireLowercase: false,
  requireNumbers: false,
  requireSymbols: false,
  requireUppercase: false,
  temporaryPasswordValidityDays: 123,
};
```

## Properties

- `minimumLength`: number — The minimum length of the password in the policy that you have set.

  This value can't be less than 6.

- `passwordHistorySize`: number — The number of previous passwords that you want Amazon Cognito to restrict each user from reusing.

  Users can't set a password that matches any of `n` previous passwords, where `n` is the value of `PasswordHistorySize` .

- `requireLowercase`: boolean | [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) — The requirement in a password policy that users must include at least one lowercase letter in their password.

- `requireNumbers`: boolean | [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) — The requirement in a password policy that users must include at least one number in their password.

- `requireSymbols`: boolean | [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) — The requirement in a password policy that users must include at least one symbol in their password.

- `requireUppercase`: boolean | [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) — The requirement in a password policy that users must include at least one uppercase letter in their password.

- `temporaryPasswordValidityDays`: number — The number of days a temporary password is valid in the password policy.

  If the user doesn't sign in during this time, an administrator must reset their password. Defaults to `7` . If you submit a value of `0` , Amazon Cognito treats it as a null value and sets `TemporaryPasswordValidityDays` to its default value.

  > When you set `TemporaryPasswordValidityDays` for a user pool, you can no longer set a value for the legacy `UnusedAccountValidityDays` parameter in that user pool.