What is the password Policy for JIRA Cloud if my setting is "strong"

[Andrea Carl]

Atlassian provides examples, but not actual rules.  Users have an extremely difficult time setting passwords and there are no actual rules.

[Nic Brough -Adaptavist-]

Good passwords have high entropy, not "complexity that makes it hard to remember but easier to crack".  If you want a simple rule - the longer your password the better (And on a human note, use something you can remember, and do not have to write down because it's complex)

MyCatLikesNapsAndTummyRubs has a far higher entropy than mYc4tSl33ps despite the apparent complexity of the two phrases, and is hence, a far stronger password.  With the added bonus that I don't need to write it down.

Anyway, see https://confluence.atlassian.com/cloud/set-password-requirements-744721633.html and look at the article on entropy in the middle (although I prefer https://xkcd.com/936/ )

[Andrea Carl]

Hi Nic, I understand what makes a password more complex, but I'm looking for rules for each degree of strength . . Examples: password must be between 8 and 12 characters. Password can not contain 3 or more repeating characters, etc.