Are the Password Policy Complexity Requirements Applied when Generating a Temporary Password
May 23, 2025
Administration
Okta Classic Engine
Okta Identity Engine
Overview
This article discusses whether, when generating a temporary password, the password policy complexity requirements are applied.
Applies To
- Temporary Password
- Password Policy Complexity requirements
Solution
Temporary passwords will be created using the password requirements set in the Legacy Policy, which can be viewed by navigating to Security > Authentication in the Admin Console.
- For example, if the password length specified in the Legacy Policy is set to 16 characters, a temporary password created for a user will be 16 characters long.
NOTE: If the Legacy Policy is deactivated, temporary passwords adhere to Default Policy settings. However, temporary passwords are marked as expired upon creation, prompting users to change them upon first login.
