# Password policies and admin password reset

> Configure password policy settings and reset the administrator password from the command line

---

Site [llms.txt](/llms.txt)

---

Cloud Management Platform (CMP) enforces password requirements, history, and expiration through settings you configure in `customer_settings.py`.

## Password policy settings

Configure these settings in `customer_settings.py`:

- `PASSWORD_HISTSIZE`: The number of previous passwords a user cannot reuse. The default is 10.
- `AUTH_PASSWORD_VALIDATORS`: Password requirements such as length and complexity. By default, Cloud Management Platform requires at least 9 characters and a mix of character types. See the [Django password validation documentation](https://docs.djangoproject.com/en/5.2/topics/auth/passwords/#module-django.contrib.auth.password_validation).
- `PASSWORD_EXPIRATION_HOURS`: The number of hours after which a password expires, and the user must set a new one. The default is 0, which disables expiration.
- `PASSWORD_RESET_TIMEOUT`: How long, in days, a password reset token stays valid. The default is 86400.
- `EMAIL_VERIFICATION_TIMEOUT_DAYS`: The number of days a user has to use an email verification link before it expires. The default is 1.

## Reset the administrator password

If you are locked out or need to reset an administrator's password, use Django's built-in `changepassword` command. SSH into your CMP instance and run:

```bash
sudo su -
/opt/cloudbolt/manage.py changepassword <username>
```

Replace `<username>` with the administrator's username; you are prompted to enter and confirm the new password. If you omit the username, `changepassword` targets your current shell user (for example, `root`), which is not a CMP account and returns a "user does not exist" error.

<div class="alert alert-info" role="alert">


The username `admin` is reserved. Use the username of the administrator account created during setup. To restore Super Admin privileges to an account, see [Global roles](/docs/cmp/configure/access-and-security/groups-roles-permissions/global-roles/).
</div>


### Reset from Shell Plus

Alternatively, reset a password from Shell Plus. SSH into your instance, become the root user, and start Shell Plus:

```bash
sudo su -
/opt/cloudbolt/manage.py shell_plus
```

Then run, replacing the username and password:

```python
user = User.objects.get(username='<username>')
user.set_password('your_new_password')
user.save()
exit
```

The new password is the value you pass to `set_password`.