---
title: "Create secure passwords"
slug: "create-secure-passwords"
updated: 2025-11-26T11:19:02Z
published: 2025-11-26T11:19:02Z
canonical: "docs.grassfish.com/create-secure-passwords"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.grassfish.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create secure passwords

As a server administrator, you can control how complex user passwords need to be in IXM One. This ensures that users create secure passwords that meet your organization’s security standards.

### Prerequisites

Consider the following prerequisites for creating secure passwords:

- You must be a server administrator.
- You must have access to the database.
- Regular expressions are a powerful but complex tool. We recommend that only server administrators with prior experience use them.

## How does it work?

A secure password is defined by two key components: the password rules and invalid entries.

****Password rules****

The password structure is defined by the regular expression `PasswordRegEx`. This regular expression specifies the rules that passwords must follow, for example, requiring uppercase letters, numbers, or special characters.

**Example**

```plaintext
passwordRegEx = ^(?=.*[A-Z])(?=.*[a-z])(?=.*\d)(?=.*[@$!%*?&])[A-Za-z\d@$!%*?&]{8,}$
```

This example species the following rules:

- The password must be at least 8 characters long.
- The password must include at least one uppercase letter.
- The password must include at least one lowercase letter.
- The password must include at least one number.
- The password must include at least one special character.

> [!NOTE]
> Note
> 
> You can [adjust the expression](/grassfish/docs/create-secure-passwords#change-ixm-one-password-rules) to match your security requirements.

****Invalid entries****

Optionally, invalid entries can be specified using the regular expression `PasswordRegExInvalidOnMatch`. This expression specifies which entries are not allowed for a password, such as a particular username or certain words.

**Example**

```plaintext
passwordRegExInvalidOnMatch = ^(%USERNAME%|%CUSTOMERNAME%)$
```

This example specifies the following rules:

- The password must not be the same as the username or customer name.

> [!NOTE]
> Note
> 
> You can [adjust the expression](/grassfish/docs/create-secure-passwords#change-ixm-one-password-rules) to match your security requirements.

## Check regular expressions

Consider the following information when working with regular expressions:

- You can use the following tool to explain regular expressions and check their syntax: [https://regex101.com/](https://regex101.com/)
- If you use this tool, ensure to set the flavor to **C#**.
- In addition, AI tools can help you explain and create regular expressions.

## Change IXM One password rules

When you create a new customer in IXM One, the default password settings are automatically copied to the `datCustomers` table.

If you want to change the password rules for a customer, you must do this directly in the database.

To change the default password rules, perform the following steps:

1. Open the database that contains the IXM One customer data.
2. Locate the `datCustomers` table.
3. Find the customer you want to update.
4. Edit the following settings:
  - **PasswordRegEx**: Specify the required password structure.
  - **PasswordRegExInvalidOnMatch**: Optionally, specify which entries are invalid.
5. Save your changes.

![](https://cdn.document360.io/e2b87f73-d9f5-43cb-8182-2641762664fd/Images/Documentation/server_password_db.png?sv=2026-02-06&spr=https&st=2026-11-06T19%3A46%3A05Z&se=2026-11-06T20%3A46%3A05Z&sr=c&sp=r&sig=2Qq5grCEWVJJCHdK3FzGUanqoieFzOMzHEdEEwshEnY%3D)

> [!NOTE]
> Note
> 
> The regular expression in the database must be HTML-encoded.

## Customize the tooltip

When users enter a new password that doesn’t meet the password rules, there’s a tooltip informing them of the password rules.

To learn how to specify the tooltip text and add translations, [click here](/grassfish/docs/configure-password-reset#customize-the-tooltip).