Overview
Enforcing strong passwords ensures users can't set weak or easily guessable credentials. Google's strong password setting requires a mix of letters, numbers, and symbols, and allows administrators to set minimum and maximum length requirements.
Prerequisites
Super Admin access to the Google Admin console
Instructions
Sign in to the Google Admin console
Navigate to Security > Authentication > Password management
Select the organizational unit you want to apply this setting to
Under Strength, check Enforce strong password
Under Length, set a minimum length of at least 12 characters
Click Save
Note: Password management policies don't apply when users authenticate through a third-party identity provider (IdP). If your organization uses SSO, confirm that password strength requirements are also enforced at the IdP level.