# Does Ignition's Internal User Source have Configurable Password Expiration/Complexity Policies?

**URL:** <https://forum.inductiveautomation.com/t/does-ignitions-internal-user-source-have-configurable-password-expiration-complexity-policies/114127>\
**Category:** Ignition\
**Tags:** ignition81, perspective\
**Created:** [February 23, 2026, 5:31pm UTC](https://forum.inductiveautomation.com/t/does-ignitions-internal-user-source-have-configurable-password-expiration-complexity-policies/114127 "2026-02-23T17:31:03Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Rajashekar\_Reddy](https://avatars.discourse-cdn.com/v4/letter/r/c0e974/32.png) [@Rajashekar\_Reddy](https://forum.inductiveautomation.com/u/Rajashekar_Reddy)\
**Post date:** [February 23, 2026, 5:31pm UTC](https://forum.inductiveautomation.com/t/does-ignitions-internal-user-source-have-configurable-password-expiration-complexity-policies/114127/1 "2026-02-23T17:31:03Z")

</div>

Dear team,

The client is asking for the password to be changed when it expires, and the password should have a minimum complexity of 12 characters, including at least one uppercase letter, one lowercase letter, one number, and one symbol, as required for audit purposes. Kindly let me know if this is possible with the internal user source, or if a DB connection is required.

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [February 23, 2026, 5:34pm UTC](https://forum.inductiveautomation.com/t/does-ignitions-internal-user-source-have-configurable-password-expiration-complexity-policies/114127/2 "2026-02-23T17:34:15Z")

</div>

> **[Password Policies Properties​ - Internal Authentication | Ignition User Manual](https://www.docs.inductiveautomation.com/docs/8.3/platform/security/classic-authentication-strategy/internal-authentication#password-policies-properties)**
>
> An Internal type User Source stores user information internally in the Gateway's database. This means that Internal User Sources are included in Gateway Backup files, and don't require an external SQL database, or other external user management...