---
title: Password Policy Minimum Password Length Too Weak
description: "Impact Area Security   Severity High   Affected Element Profile Org Config ## Rule ID **SF-0112** ## Impact Allowing weak minimum password length policies can open you up to brute force or dictionary attacks. ## Remediation Set to 8 characters…"
url: "https://community-staging.qualityclouds.com/qcdocs/qcr/rules/password-policy-minimum-password-length-too-weak/"
updated: "2025-03-21"
category: Rules
---

# Password Policy Minimum Password Length Too Weak

Impact Area

Security

 

Severity

High

 

           Affected Element

Profile

Org Config

## Rule ID

**SF-0112**

## Impact

Allowing weak minimum password length policies can open you up to brute force or dictionary attacks.

## Remediation

Set to 8 characters or more the minimum number of characters required for a password.

### Time to fix

30 min

## References

This rule is linked to [Common Weakness Enumeration CWE-521 Weak Password Requirements](https://cwe.mitre.org/data/definitions/521.html).