How to set up password requirements

Here's how Administrators (admin user) can update password requirements for local user management via the Leapwork Studio.

Step 1: Double-check that you're running Leapwork version 2021.1.993 or newer. 

Step 2: Open Leapwork Studio and click on "Settings." 

Step 3: Click on "Security."

Step 4: Configure Password Complexity. By default, Leapwork requires at least one lowercase letter, one uppercase letter, and one digit. You can choose to tick the box that adds "at least one special (non-alphanumeric) character" to the list of requirements. 

You can also select a minimum required password length (within Leapwork's range of 6 to 20 characters).

Lastly, you can choose the "Never expires" option or enforce password renewal after a set number of days.

Step 5: Click "Save" and the new password requirements will go out to your entire team.

Users will be able to log in with their current password until you save the new requirements. If, for example, a user last updated their password 28 days ago, and you have selected a 30-day expiration date, they will have to update when accessing Leapwork Studio after two days.

If you want all users to update to the new password requirements as soon as possible, you could set the "Days before expires" to a lower number (e.g., two days). Once everyone has updated, you can go back in and change the expiration settings to match your organization's security policy (e.g., updating passwords every 90 days). 

On a user level, you can always go to "User management", select the desired user and click "Edit", click on Set new password, and then either set a new password manually or choose the "Automatically create a password checkbox" select "Enforce this user to change their password on next login."

However, it's faster to go through the above-listed "Security" steps if you're pushing these requirements to your whole team. 

For clarification, please contact our Priority Support.