# Password rules: what is on the screen

Find the password policy controls, their current defaults, and the separate protection for passwords found in published breaches.

In **[BetterShield](/)**, the **Password policy** row is under **BetterShield › Settings › General › Checks & passwords**. It applies when someone chooses a password, not when they sign in.

<figure class="doc-shot">
  <img src="/docs/screenshots/password-rules.png" alt="Password policy row with the minimum-standard switch on, minimum length 8, and admins and editors length 12." width="1960" height="526" loading="lazy" decoding="async">
  <figcaption>The policy is on by default with separate lengths for ordinary and privileged accounts.</figcaption>
</figure>

Use [Set a minimum standard for new passwords](/docs/minimum-password-standard/) for every option, default, checked location, and reversal step.

**Leaked password check** is a separate protection under **BetterShield › Protection › Login & Access**. See [Refuse breached passwords](/docs/refuse-breached-passwords/).

## Related

- [General settings](/docs/general-settings/)
- [Login & Access](/docs/login-and-access/)
- [Two-factor and passkeys](/docs/two-factor-and-passkeys/)
