All checks

Medium Cognito · regional

Password policies for Cognito user pools should have strong configurations

Flags Amazon Cognito user pools whose password policy does not meet the recommended baseline (8+ chars, requires upper/lower case, number, symbol, and a temporary password validity of no more than 7 days).

service: Cognito
severity: Medium
scope: evaluated in every region

How to fix it

Strengthen the user pool's password policy to meet the recommended baseline.

Open the Amazon Cognito console and select the user pool.
Choose Sign-in experience, then Edit.
Under Password policy, set minimum length to at least 8 and require uppercase, lowercase, number, and symbol characters.
Set the temporary password validity to no more than 7 days.
Save the changes.

See which of your accounts this check is failing on.

Book a demo