Yes, you can set up password policies, such as strength of password and character type requirements, when setting up or configuring your user pool.