@nguyenhaongnam You are right, so far FOG does not impose password complexity rules. Probably something we can add. But I am wondering what exactly your project is about? I am asking because there is no access control build into FOG either. One of our active users created a plugin (see here) but it’s not used widely and I am not sure about it’s current state.