4
Password restrictions
Mathew Evans edited this page 2025-08-28 14:20:53 +01:00
This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

Important

This page has been moved. Please update your bookmarks.

Click here to be redirected to our new on-premises documentation.


View outdated content

It is possible to enforce password restrictions on users when using the Overleaf login system, not a SSO option such as LDAP.

  • OVERLEAF_PASSWORD_VALIDATION_MIN_LENGTH: The minimum length required

  • OVERLEAF_PASSWORD_VALIDATION_MAX_LENGTH: The Maximum length allowed

  • OVERLEAF_PASSWORD_VALIDATION_PATTERN: is used to validate password strength

    • abc123 password requires 3 letters and 3 numbers and be at least 6 characters long
    • aA password requires lower and uppercase letters and be 2 characters long
    • ab$3 it must contain letters, digits and symbols and be 4 characters long
    • There are 4 groups of characters: letters, UPPERcase letters, digits, symbols. Everything that is neigher letter, nor digit is considered to be a symbol.

Note: starting with Overleaf CE/Server Pro 5.0.1 environment variables have been rebranded from SHARELATEX_* to OVERLEAF_*. If you're using a 4.x version (or earlier) please use SHARELATEX_PASSWORD_VALIDATION_MIN_LENGTH, SHARELATEX_PASSWORD_VALIDATION_MAX_LENGTH and SHARELATEX_PASSWORD_VALIDATION_PATTERN.