Understanding Okta Password Length Limitations
Last Updated:
Okta Classic Engine
Okta Identity Engine
Administration
Overview
Applies To
- Okta Classic Engine
- Okta Identity Engine (OIE)
- Okta home/sourced users
Cause
Solution
For Okta home-sourced users, there is technically no upper limit set for password length. However, Okta only stores and verifies the first 72 characters of the password. Any characters beyond this limit are disregarded.
It's important to note that this policy does not extend to accounts that authenticate to Okta using credentials validated against a third-party service, such as Delegated Authentication to AD/LDAP, Social Authentication, etc. These services may have their own password length requirements or restrictions.
