---
title: "Get the current User password policy (getUserPasswordPolicy)"
method: GET
path: "/api/noauth/userPasswordPolicy"
tags: ["auth-controller"]
---

# Get the current User password policy (getUserPasswordPolicy)

`GET /api/noauth/userPasswordPolicy`

API call to get the password policy for the password validation form(s).

## Response `200`

OK

- UserPasswordPolicy
  - `minimumLength` integer — Minimum number of symbols in the password.
  - `maximumLength` integer — Maximum number of symbols in the password.
  - `minimumUppercaseLetters` integer — Minimum number of uppercase letters in the password.
  - `minimumLowercaseLetters` integer — Minimum number of lowercase letters in the password.
  - `minimumDigits` integer — Minimum number of digits in the password.
  - `minimumSpecialCharacters` integer — Minimum number of special in the password.
  - `allowWhitespaces` boolean — Allow whitespaces
  - `forceUserToResetPasswordIfNotValid` boolean — Force user to update password if existing one does not pass validation
  - `passwordExpirationPeriodDays` integer — Password expiration period (days). Force expiration of the password.
  - `passwordReuseFrequencyDays` integer — Password reuse frequency (days). Disallow to use the same password for the defined number of days

---

[API](https://skmtc.net/thingsboard/apis/thingsboard-rest-api.md) · [All operations](https://skmtc.net/thingsboard/apis/thingsboard-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/thingsboard/thingsboard-rest-api/revisions/40169ccdec5c/schema)