---
title: Password Policy Complexity Too Weak – No Restrictions
description: "**Impact area** Security **Severity** High **Affected element** Profile Org Config ## Rule ID **SF-0173** ## Impact Weak password complexities can open you up to brute force and dictionary attacks. ## Remediation Modify the password complexity settings to contains special characters,…"
url: "https://community-staging.qualityclouds.com/qcdocs/qcr/rules/password-policy-complexity-too-weak-no-restrictions/"
updated: "2025-03-21"
category: Rules
---

# Password Policy Complexity Too Weak – No Restrictions

**Impact area**

Security

**Severity**

High

**Affected element**

Profile

Org Config

## Rule ID

**SF-0173**

## Impact

Weak password complexities can open you up to brute force and dictionary attacks.

## Remediation

Modify the password complexity settings to contains special characters, an upper-lower case mixture, and numeric characters.

### Time to fix

30 min

## References

This rule is linked to [Common Weakness Enumeration CWE-521 Weak Password Requirements](https://cwe.mitre.org/data/definitions/521.html).