How Do I Enforce Password Complexity in Confluence?

Platform Notice: Cloud and Data Center - This article applies equally to both cloud and data center platforms.

Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.

*Except Fisheye and Crucible

Though Confluence alone does not provide password complexity controls out-of-the-box, you can integrate Confluence with your LDAP or Active Directory and configure password controls in your external directory.

Atlassian's own unified identity management and single sign-on application, Crowd, also provides password pattern/requirement checks for its configured internal directories.

Further, you may wish to take a look at Confluence Security Overview and Advisories, which answers a number of questions that commonly arise when customers ask us about application-level security for Confluence.

Another possibility is to use Enterprise Password Policy addon that offers a variety of nice password management features. Please note that it's a paid addon.

Updated on April 8, 2025

Still need help?

The Atlassian Community is here for you.