# Password length policy on Litium 5.6

**URL:** <https://forum.litium.com/t/password-length-policy-on-litium-5-6/840>\
**Category:** Questions\
**Tags:** litium-5\
**Created:** [May 8, 2019, 12:04pm UTC](https://forum.litium.com/t/password-length-policy-on-litium-5-6/840 "2019-05-08T12:04:48Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![alireza](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.litium.com/alireza/32/331_2.png) [@alireza](https://forum.litium.com/u/alireza)\
**Post date:** [May 8, 2019, 12:04pm UTC](https://forum.litium.com/t/password-length-policy-on-litium-5-6/840/1 "2019-05-08T12:04:48Z")

</div>

How can we set a policy for Litium that it sets a minimum length for the password? I searched the forum and created this setting in my Web.Config:

```
<passwordPolicy lockoutCount="-1" lockoutSeconds="300" expirePeriodInDays="-1" complexityRule="false" lengthRule="true" requiredLength="10"/>

```

But the above configuration is not working. I tried set minimum password length to 10 characters.

Litium version: _[5.6]_

---

<div class="post-metadata">

**Author:** ![NilsN](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.litium.com/nilsn/32/302_2.png) [@NilsN](https://forum.litium.com/u/NilsN)\
**Post date:** [May 9, 2019, 7:16am UTC](https://forum.litium.com/t/password-length-policy-on-litium-5-6/840/2 "2019-05-09T07:16:04Z")

</div>

I think prior to Litium 6, the minimum required length when having `lengthRule` set to `true` was 6 characters. The possibility to set a custom minimum length was added later.