Work Profile Password

This configuration allows you to define the password requirements for Android Enterprise devices with a work profile and, optionally, for the personal profile.

Available Areas #

• Work Profile
• Personal Profile

Depending on the selected profile, different password requirements can be defined.

General #

Minimum Quality #

Defines the required quality or type of screen lock or password.

The following options are available:

• Complex (strong)
  Enforces a particularly strong password quality with high security requirements.

• Alphanumeric
  The password must consist of letters and numbers.

• Alphabetic
  The password may only consist of letters.

• Complex Numeric
  Requires a numeric password with increased requirements, for example without simple or easy-to-guess number sequences.

• Numeric
  The password consists only of numbers.

• Pattern
  The device is secured using an unlock pattern.

• Biometric (weak)
  A weaker biometric unlock method can be used, if supported by the device.

Note: Which options are actually available and enforceable depends on the device, Android version, and manufacturer customizations.

Minimum Length #

Defines the minimum number of characters required for the password.

Example:

• 4 → The password must be at least 4 characters long.

Maximum Age (in Days) #

Determines after how many days the password must be changed.

Number of days until a new password must be set. If the value is set to 0, the password never expires.

Example:

• 0 → No password expiration.

Password History #

Defines how many previously used passwords may not be reused.

Number of stored and previously used passwords that may no longer be used again.

Example:

• 0 → There is no restriction on password reuse.

Number of Failed Password Attempts Before All Data Is Wiped #

Defines after how many incorrect password attempts a reset or wipe is triggered.

If no value is set, no automatic wipe is usually performed.

Additional Options #

Disable Apps in the Work Profile Until the User Meets the Password Requirements #

If this option is enabled, apps in the work profile remain disabled until the configured password meets the defined requirements.

Separate Passcode Required for the Work Profile #

If enabled, a separate passcode must be set for the work profile.

If this option is disabled, the same device screen lock may be used in some cases.

Note: If this option is not enabled, a system-wide timeout of 60 seconds is automatically applied.

Notes #

• These settings apply to Android Enterprise scenarios with Work Profile / Personal Profile.
• Not all options are available to the same extent on every device or Android version.
• Actual enforcement depends on the manufacturer, Android version, and device mode.