Password policies quality

  • This page explains how passwordRequirements instances are chosen based on the device management mode, summarizing documentation for PasswordRequirements.PasswordQuality.

  • Complexity-based password requirements include COMPLEXITY_LOW, COMPLEXITY_MEDIUM, and COMPLEXITY_HIGH.

  • Quality-based password requirements include all requirements except PASSWORD_QUALITY_UNSPECIFIED.

  • Prior to Android 12, quality-based settings are always selected for all scopes if present.

  • On Android 12 and later, the applied password settings depend on the device management mode, such as fully managed, company-owned work profile, or personally owned work profile devices.

This page summarizes documentation provided forPasswordRequirements.PasswordQualityand represents howpasswordRequirementsinstances are chosen to be applied based on the device management mode.

  1. Complexity-based requirements areCOMPLEXITY_LOW,COMPLEXITY_MEDIUMandCOMPLEXITY_HIGH.
  2. Quality-based requirements are all other requirements exceptPASSWORD_QUALITY_UNSPECIFIED.

Prior to Android 12

Quality-based settings are always selected for all scopes if present.

Android 12 and later

Behavior depends on the device management mode.

Fully managed devices

Device scoped quality-based setting is always applied if present.

Company-owned work profile devices

The first two columns represent which password settings are specified in thepolicy. The last two columns represent which password settings are chosen to beapplied.

Device-scoped settingProfile-scoped settingApplied device-scoped settingApplied profile-scoped setting
Complexity & QualityComplexity & QualityComplexityComplexity
Complexity & QualityQualityQualityQuality
Complexity & QualityNoneQualityNone
QualityComplexity & QualityNot allowed
QualityQualityQualityQuality
QualityNoneQualityNone
NoneComplexity & QualityNoneComplexity
NoneQualityNoneQuality
NoneNoneNoneNone

Personally owned work profile devices

The first two columns represent which password settings are specified in thepolicy. The last two columns represent which password settings are chosen to beapplied.

Device-scoped settingProfile-scoped settingApplied device-scoped settingApplied profile-scoped setting
Complexity & QualityComplexity & QualityComplexityComplexity
Complexity & QualityQualityComplexityQuality
Complexity & QualityNoneComplexityNone
QualityComplexity & QualityNot allowed
QualityQualityComplexity (Translated from Quality)Quality
QualityNoneComplexity (Translated from Quality)None
NoneComplexity & QualityNoneComplexity
NoneQualityNoneQuality
NoneNoneNoneNone

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-07-02 UTC.