Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.23
  3. IT Policy Rules Reference Guide
  4. macOS IT policy rules
  5. macOS: Password rules

macOS
: Password rules

Name
Description
Activation types
Default
Possible values
IT policy rules target
This rule specifies whether the IT policy rules for the password apply only to the assigned user's account or to the entire device.
Minimum OS version: 10.8.0
MDM controls
User
  • User
  • Device
Password required for device
Specify whether a user must set a password.
MDM controls
Not selected
Allow simple value
Specify whether the password can contain sequential or repeated characters, such as ABCD or 3333.
Depends on: Password required for device
MDM controls
Selected
Require alphanumeric value
Specify whether the password must contain both letters and numbers.
Depends on: Password required for device
MDM controls
Not selected
Minimum password length
Specify the minimum number of characters that the password must contain.
Depends on: Password required for device
MDM controls
Minimum value: 1 character
Maximum value: 16 characters
Minimum number of complex characters
Specify the minimum number of non-alphanumeric characters that the password must contain.
Depends on: Password required for device
MDM controls
Minimum value: 1 character
Maximum value: 4 characters
Maximum password age
Specify the maximum number of days that the password can be used. After the specified number of days elapse, the password expires and the user must set a new password.
Depends on: Password required for device
MDM controls
Minimum value: 1 day
Maximum value: 730 days
Maximum auto-lock
Specify the maximum value that a user can set for the auto-lock time, which is the number of minutes of user inactivity that must elapse before a device locks.
If set to "None," the user can select any value.
Depends on: Password required for device
MDM controls
None
  • None
  • 1 min
  • 2 mins
  • 3 mins
  • 4 mins
  • 5 mins
Password history
Specify the maximum number of previous passwords that a device checks to prevent reuse.
Depends on: Password required for device
MDM controls
Minimum value: 1 previous password
Maximum value: 50 previous passwords
Maximum grace period for device lock
Specify the maximum value that a user can set for the grace period for device lock, which is the amount of time that a device can be locked before a password is required to unlock it.
If set to "None," all values are available on the device. If set to "Immediately," the password is required immediately after the device locks.
Depends on: Password required for device
MDM controls
None
  • None
  • Immediately
  • 1 min
  • 5 mins
  • 15 mins
  • 1 hr
  • 4 hrs
Maximum failed password attempts
Specify the number of times that a user can enter an incorrect password before a device is wiped.
Depends on: Password required for device
MDM controls
10 attempts
Minimum value: 2 attempts
Maximum value: 10 attempts