---
title: Password Policy Complexity Too Weak – Alphanumeric Restriction Only
description: "**Impact area** Security **Severity** High **Affected element** Profile Org Config ## Rule ID **SF-0174** ## Impact Weak password complexities can open you up to brute force and dictionary attacks. ## Remediation Modify the password complexity settings to contains special characters,…"
url: "https://community-staging.qualityclouds.com/qcdocs/qc/salesforce-rules/password-policy-complexity-too-weak-alphanumeric-restriction-only/"
updated: "2025-03-21"
category: Rules
---

# Password Policy Complexity Too Weak – Alphanumeric Restriction Only

**Impact area**

Security

**Severity**

High

**Affected element**

Profile

Org Config

## Rule ID

**SF-0174**

## Impact

Weak password complexities can open you up to brute force and dictionary attacks.

## Remediation

Modify the password complexity settings to contains special characters, an upper-lower case mixture, and numeric characters.

### Time to fix

30 min

## References

This rule is linked to [Common Weakness Enumeration CWE-521 Weak Password Requirements](https://cwe.mitre.org/data/definitions/521.html).