---
title: Setting Up Password
slug: user-guide-10x/setting-up-password
docTags: 
createdAt: 2025-09-29T07:01:48.102Z
---

As an administrator, you control password reset intervals, complexity requirements, and login failure thresholds. You can also enable Two-Factor Authentication (2FA) for accessing Swimlane and specify an administrator email for security notifications.

To configure security parameters:

1. From the **Sessions and Security** dashboard, click **>** to expand the **Password** controls.
2. Configure the following options:
   - **Password Expiration (days):**
      Enter the number of days after which user passwords will expire.
     - **Password Expiration Unit:** Choose from:
       - **Never** – passwords never expire.
       - **Day(s)** – set password expiration based on the number of days you specify.
   - **Minimum Password Complexity:** Select the required complexity level from the drop-down.
     - **0 – Too guessable:** Risky password.
     - **1 – Very guessable:** Protection from throttled online attacks.
     - **2 – Somewhat guessable:** Protection from unthrottled online attacks.
     - **3 – Safely unguessable:** Moderate protection from offline slow-hash scenarios.
     - **4 – Very unguessable:** Strong protection from offline slow-hash scenarios.
   - **Minimum Password Length:** Enter the minimum number of characters required for user passwords. The default is 6.
   - **Number of Allowable Failed Logins:** Select how many failed login attempts are permitted before the account is locked. Options range from **3 to 10**.
   - **Security Notification Email:** Enter an administrator email address to receive security-related notifications, such as when accounts are locked due to failed login attempts.
3. For information about 2FA, see [Enable Two-Factor Authentication](docId:4qOZosP3Cr6R6Du7KwESw).