---
title: "Updates the password rules for an account."
method: PUT
path: "/v2.1/accounts/{accountId}/settings/password_rules"
tags: ["AccountPasswordRules"]
---

# Updates the password rules for an account.

`PUT /v2.1/accounts/{accountId}/settings/password_rules`

This method updates the password rules for an account.

**Note:** To update the password rules for an account, you must be an account administrator.

## Path parameters

- `accountId` string, required

## Request body

- AccountPasswordRules
  - `expirePassword` string — When **true,** passwords expire. The default value is `false`.
  - `expirePasswordDays` string — The number of days before passwords expire. To use this property, the `expirePassword` property must be set to **true.**
  - `expirePasswordDaysMetadata` AccountPasswordExpirePasswordDays
    - `maximumDays` string
    - `minimumDays` string
  - `lockoutDurationMinutes` string — The number of minutes a user is locked out of the system after three failed login attempts. The default value is `2`.
  - `lockoutDurationMinutesMetadata` AccountPasswordLockoutDurationMinutes
    - `maximumMinutes` string
    - `minimumMinutes` string
  - `lockoutDurationType` string — The interval associated with the user lockout after a failed login attempt. Possible values are: - `minutes` (default) - `hours` - `days`
  - `lockoutDurationTypeMetadata` AccountPasswordLockoutDurationType
    - `options` string[] — An array of option strings supported by this setting.
  - `minimumPasswordAgeDays` string — The minimum number of days after a password is set before it can be changed. This value can be `0` or more days. The default value is `0`.
  - `minimumPasswordAgeDaysMetadata` AccountPasswordMinimumPasswordAgeDays
    - `maximumAge` string
    - `minimumAge` string
  - `minimumPasswordLength` string — The minimum number of characters in the password. This value must be a number between `6` and `15`. The default value is `6`.
  - `minimumPasswordLengthMetadata` AccountMinimumPasswordLength
    - `maximumLength` string — The maximum number of entry characters supported by the custom tab.
    - `minimumLength` string — Minimum length of the access code string.
  - `passwordIncludeDigit` string — When **true,** passwords must include a digit. The default value is `false`.
  - `passwordIncludeDigitOrSpecialCharacter` string — When **true,** passwords must include either a digit or a special character. The default value is `false`. **Note:** Passwords cannot include angle brackets (`<` `>`) or spaces.
  - `passwordIncludeLowerCase` string — When **true,** passwords must include a lowercase letter. The default value is `false`.
  - `passwordIncludeSpecialCharacter` string — When **true,** passwords must include a special character. The default value is `false`. **Note:** Passwords cannot include angle brackets (`<` `>`) or spaces.
  - `passwordIncludeUpperCase` string — When **true,** passwords must include an uppercase letter. The default value is `false`.
  - `passwordStrengthType` string — The type of password strength. Possible values are: - `basic`: The minimum password length is 6 characters with no other password requirements. - `medium`: The minimum password length is 7 characters. Passwords must also have one uppercase letter, one lowercase letter, and one number or special character. - `strong`: The minimum password length is 9 characters. Passwords must also have one uppercase letter, one lowercase letter, one number, and one special character. - `custom`: This option enables you to customize password requirements, including the following properties: - `minimumPasswordLength` - `minimumPasswordAgeDays` - `passwordIncludeDigit` - `passwordIncludeDigitOrSpecialCharacter` - `passwordIncludeLowerCase` - `passwordIncludeSpecialCharacter` - `passwordIncludeUpperCase` - `questionsRequired`
  - `passwordStrengthTypeMetadata` AccountPasswordStrengthType
    - `options` AccountPasswordStrengthTypeOption[] — An array of option strings supported by this setting.
      - `minimumLength` string — Minimum length of the access code string.
      - `name` string
      - `passwordIncludeDigit` string — When **true,** passwords must include a digit. The default value is `false`.
      - `passwordIncludeDigitOrSpecialCharacter` string — When **true,** passwords must include either a digit or a special character. The default value is `false`. **Note:** Passwords cannot include angle brackets (`<` `>`) or spaces.
      - `passwordIncludeLowerCase` string — When **true,** passwords must include a lowercase letter. The default value is `false`.
      - `passwordIncludeSpecialCharacter` string — When **true,** passwords must include a special character. The default value is `false`. **Note:** Passwords cannot include angle brackets (`<` `>`) or spaces.
      - `passwordIncludeUpperCase` string — When **true,** passwords must include an uppercase letter. The default value is `false`.
  - `questionsRequired` string — The number of security questions required to confirm the user’s identity before the user can reset their password. The default value is `0`.
  - `questionsRequiredMetadata` AccountPasswordQuestionsRequired — Information about the number of password questions required (0 to 4) to confirm a user's identity when a user needs to reset their password.
    - `maximumQuestions` string — The maximum number of password reset questions allowed for the account. This number must be between `0` and `4`, and equal to or greater than `minimumQuestions`.
    - `minimumQuestions` string — The minimum number of password reset questions allowed for the account. This number must be between `0` and `4`, and equal to or less than `maximumQuestions`.

## Response `200`

Successful response.

## Other responses

- `400` — Error encountered.

---

[API](https://skmtc.net/docusign/apis/docusign-esignature-rest-api.md) · [All operations](https://skmtc.net/docusign/apis/docusign-esignature-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/docusign/docusign-esignature-rest-api/revisions/77f1998c313d/schema)