# Setting Password Complexity in the GMC

HTML version: [Setting Password Complexity in the GMC](https://support.gladstonesoftware.cloud/gladstone360/setting-password-complexity-in-the-gmc)

## Problem
You need to set how complex staff passwords must be for Gladstone 360, Plus2 and Operator, which share one password rule set in the GMC.

## Resolution

1. **Open Security Configuration Settings**
   - Go to `GMC > Security Configuration > Settings`. The level is set once and applied across the Gladstone suite.

2. **Choose the level**

   | Level | Rule |
   |---|---|
   | **Low** | At least 6 characters; letters and/or numbers only. |
   | **Medium** | At least 6 characters, with at least 1 upper-case letter, 1 lower-case letter and 1 number. |
   | **High** | At least 8 characters, with at least 1 upper-case letter, 1 lower-case letter, 1 number and 1 special character (see Notes). |

3. **Save**
   - Select **Save**.

## Notes

- The **High** rule above comes from 2013 documentation. Recent training on the SaaS platform described **High** as **10+ characters** with upper and lower case, a number and a special character, which is likely to reflect the current platform. Check the rule shown on the live Settings screen.
- The rule applies across the Gladstone suite. Plus2, 360 and Operator share **one user list** and normally one login.
- Customer passwords on Go follow Go's own rule (at least 8 characters with upper case, lower case, a number and a special character).
- The Connect login and password rules are set in Plus2.
- Related: [Managing Gladstone 360 User Accounts and Passwords](managing-gladstone-360-user-accounts-and-passwords.md); [Assigning and Creating Security Roles in the GMC](assigning-and-creating-security-roles-in-the-gmc.md).