Password Policy Requirements

Muss-Kriterien (Basis)

A password must fulfill the following minimum requirements:

• ✅ Mindestens 8 Zeichen

  • The password must contain at least 8 characters.

• ✅ Mindestens eine Ziffer (0–9)

  • The password must contain at least one numeric digit.

• ✅ Groß- und Kleinbuchstaben

  • The password must contain both:
    • at least one uppercase letter (A-Z)
    • at least one lowercase letter (a-z)

• ✅ Nicht in einer Liste häufiger/schwacher Passwörter

  • The password must not be included in a list of commonly used or weak passwords.

---

Optional (Bonus-Policy)

The following rules can be applied as additional security requirements:

• ⭐ Mindestens ein Sonderzeichen
  • The password must contain at least one special character.
  • Allowed special characters must be defined, for example: #$%&(){}*+