# Password policies

Our user pool has a default password policy that has the following validations.

* Minimum length of 8 characters
* Require at least one number
* Require at least one special character
* Require at least one upper case
* Require at least one lower case

You should modify the default policy based on your own requirement.&#x20;

{% hint style="warning" %}
We will look at the Password Reset feature in the later section.
{% endhint %}



