Learn what a weak password blacklist is and how to configure it.
Weak password blacklist
The weak password blacklist prevents users from setting a password that contains a blacklisted keyword. You can add up to 500 keywords to the list.
Normal keyword: After you add a keyword to the blacklist, the system will prevent it from being used as a password. This restriction applies whether an employee sets their own password or an administrator sets one for them in the domain management console. The system will reject the password and provide a reason.
Regular expression: After you add a regular expression to the blacklist, the system will prevent users from setting a password that matches the pattern. This restriction applies whether an employee sets their own password or an administrator sets one for them in the domain management console. The system will reject the password and provide a reason.
If a user's current password matches an entry on the weak password blacklist, they must change it at their next login.
Procedure
Log in to the domain management console with an administrator account. Navigate to security management > account security > password policy > weak password blacklist. Click Add Blacklist, enter a keyword, and then click Confirm. You can add entries as either normal keywords or regular expressions.
Normal keyword: Enter the keywords to block. Place each keyword on a new line. The check is case-insensitive.
Regular expression: Enter the regular expression patterns to block. Place each pattern on a new line.
The new password must meet the following format requirements or the reset will fail.
Password requirements: 9–64 characters, combining at least three of: uppercase letters, lowercase letters, numbers, and special characters. The password must also pass the backend password strength check.
Examples:
Regular expression | Description | Blacklist effect |
| Passwords with fewer than 9 characters. For example, 123ABc1# | Password must be at least 9 characters long (Recommended) |
| Passwords that contain "mail". For example, BAHmail123# | Password cannot contain the keyword "mail" (Recommended) |
| Matches strings with at least one digit followed by at least one letter (case-insensitive). For example, 123abcAasd | Not recommended |
| Passwords without special characters. For example, as3DF13412 | Password must contain a special character |
| Passwords without digits. For example, asdADGG# | Password must contain digits |
1. The examples above explain what the regular expressions match. Adding them to the blacklist prohibits passwords that match these patterns.
2. The regular expression check is case-insensitive, and advanced character set features are not supported. This feature is primarily intended for blocking weak passwords that contain specific keywords.
3. Avoid using certain special characters, such as the backslash (\), in your regular expressions.