A macOS password policy sets the rules that govern the usage of login passwords on Mac devices.

1. Go to Management > Configuration profiles and create a new configuration profile (click Add > macOS > Password).
2. Configure the password requirements and settings. See the table below for more details.

   Setting	Description
   Allow simple value	Specifies if users are allowed to use repeating, ascending, or descending character series (e.g. "1234" or "DCBA") as their login password. When unchecked, the use of simple passwords is prevented.
   Require alphanumeric value	Specifies if the users' login passwords must contain at least one letter. When unchecked, users can use a series of numbers as their password (e.g. "4961974").
   Minimum length	Specifies the minimum number of password characters. Passwords with fewer characters are denied.
   Minimum number of complex characters	Specifies the number of non-alphanumeric characters required in the users' login passwords. Non-alphanumeric characters comprise all the characters except alphabets and numbers (e.g. "#!=&;").
   Change password at next login	Specifies if users are forced to change their password at the next login. Notice that this setting is compatible with macOS 10.13 and higher devices.
   Expiration age	Specifies the maximum password age before it must be changed to a new one.
   History restriction	Specifies the minimum number of new unique passwords before an earlier password can be reused. The reuse of earlier passwords is quite common and a security risk. Therefore, it is recommended to prevent users from doing so.
   Maximum number of failed attempts	Specifies the maximum number that the users can fail while attempting to enter their password. If a user exceeds the defined limit, his/her user account will be locked.
   Require password after sleep or screen saver	Specifies how long a device can be in sleep or the screen saver on before the user is required to unlock the device using the login password.
   Screen saver start time	Specifies how quickly the screen saver kicks in after user inactivity.

3. Deploy the configuration profile to your managed Mac devices either using the configuration profile deployment wizard or with the business policies.
4. During the next login, the device users must enter a password that meets the specified requirements.