{
  "id": "manage-passwords",
  "title": "Set password policies",
  "url": "https://redis.io/docs/latest/operate/rs/8.0/security/access-control/manage-passwords/",
  "summary": "Set password policies.",
  "content": "\nRedis Software provides several ways to manage the passwords of local accounts, including:\n\n- [Password complexity rules](https://redis.io/docs/latest/operate/rs/security/access-control/manage-passwords/password-complexity-rules)\n\n- [Password expiration](https://redis.io/docs/latest/operate/rs/security/access-control/manage-passwords/password-expiration)\n\n- [Password rotation](https://redis.io/docs/latest/operate/rs/security/access-control/manage-passwords/rotate-passwords)\n\nYou can also manage a user's ability to [sign in](https://redis.io/docs/latest/operate/rs/security/access-control/manage-users/login-lockout#user-login-lockout) and control [session timeout](https://redis.io/docs/latest/operate/rs/security/access-control/manage-users/login-lockout#session-timeout).\n\nTo enforce more advanced password policies, we recommend using [LDAP integration](https://redis.io/docs/latest/operate/rs/security/access-control/ldap) with an external identity provider, such as Active Directory.\n\n\nRedis Software securely stores all user passwords using a cryptographic hash function. The default password hashing algorithm is `SHA-256`, but you can [change the password hashing algorithm](https://redis.io/docs/latest/operate/rs/security/access-control/manage-passwords/password-hashing-algorithm) to `PBKDF2` as of Redis Software version 7.8.6-13.\n\n",
  "tags": ["docs","operate","rs"],
  "last_updated": "2026-07-23T12:00:25-05:00",
  "children": [{"id":"password-complexity-rules","summary":"Enable password complexity rules and configure minimum password length.","title":"Configure password complexity rules","url":"https://redis.io/docs/latest/operate/rs/8.0/security/access-control/manage-passwords/password-complexity-rules/"},{"id":"password-expiration","summary":"Configure password expiration to enforce expiration of a user's password after a specified number of days.","title":"Configure password expiration","url":"https://redis.io/docs/latest/operate/rs/8.0/security/access-control/manage-passwords/password-expiration/"},{"id":"rotate-passwords","summary":"Rotate user passwords.","title":"Rotate passwords","url":"https://redis.io/docs/latest/operate/rs/8.0/security/access-control/manage-passwords/rotate-passwords/"},{"id":"active-active-admin-credentials","summary":"Update admin credentials for Active-Active databases.","title":"Update admin credentials for Active-Active databases","url":"https://redis.io/docs/latest/operate/rs/8.0/security/access-control/manage-passwords/active-active-admin-credentials/"},{"id":"password-hashing-algorithm","summary":"Change the password hashing algorithm for user passwords in a Redis Software cluster.","title":"Change the password hashing algorithm","url":"https://redis.io/docs/latest/operate/rs/8.0/security/access-control/manage-passwords/password-hashing-algorithm/"}]
}