Skip to content

changing-password-complexity.md

Latest commit

 

History

History
42 lines (28 loc) · 1.47 KB

changing-password-complexity.md

File metadata and controls

42 lines (28 loc) · 1.47 KB
title Passwords
redirect_from
/docs/latest/operations-guide/changing-password-complexity

Passwords

Metabase can allow authentication via email and password.

Password complexity

Metabase offers a couple controls for administrators who prefer to increase the password requirements on their user accounts.

export MB_PASSWORD_COMPLEXITY=strong
export MB_PASSWORD_LENGTH=10

The settings above can be used independently, so it's fine to use only one or the other. By default Metabase uses complexity = normal and a password length of 6. The following options are available for complexity choice:

  • weak = no character constraints
  • normal = at least 1 digit
  • strong = minimum 8 characters w/ 2 lowercase, 2 uppercase, 1 digit, and 1 special character

By default, Metabase also prevents users from setting passwords that are in a list of common passwords (like qwerty123 and passw0rd). Changing the complexity requirement to weak disables this behavior.

Metabase Cloud passwords

If your instance is hosted on Metabase Cloud, passwords must:

  • Be at least 12 characters long
  • Contain at least:
    • 2 lowercase letters
    • 2 uppercase letters
    • 1 digit
    • 1 special character (!,$,%, etc.)

Disabling password logins

{% include plans-blockquote.html feature="Disabling password logins" %}

On Pro and Enterprise plans, you can require people to log in with SSO by disabling password authentication from Admin > Settings > Authentication.