We require a minimum 6 characters in passwords on our basic password management level. OWASP and NIST SP 800-63-3 password policy options have been available since May 2018 for all customer accounts.
Customers can also implement their own choice of strength requirements by creating users & passwords through our APIs and turning off user password change functionality in the app.