> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.laposta.org/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.laposta.org/_mcp/server.

# What are the password requirements of Laposta?

> What requirements Laposta sets for the length, characters and strength of your password, and how you can add extra security to your login.

You always set your own password, whether you are creating an account or receiving your own login name within an existing account. A password belongs to a single login, not to an entire account: [every user has their own login](/hoe-maak-ik-voor-collegas-extra-logins-aan) with their own password. What that user is allowed to do within the account is determined separately using [roles and permissions](/hoe-stel-ik-rechten-in-voor-gebruikers).

| Rule       | Laposta's requirements                                                                                 |
| ---------- | ------------------------------------------------------------------------------------------------------ |
| Length     | At least 8 and at most 64 characters                                                                   |
| Characters | Uppercase letters, lowercase letters, numbers and special characters are all allowed, but not required |
| Strength   | You can only save the password once it is secure enough                                                |

Length is more important here than variation: a long password is more secure than a short password with different characters. For example, the password 'cheese book tree bike' is stronger than 'P\@ssword123'.

When creating a password, Laposta immediately displays a message if the password resembles a commonly used password, if it is too short (even with uppercase letters, such a password is no more secure), or if it would be more secure by adding more words to it.

You can always reset your password yourself, whether you have forgotten it or simply want to replace it. You can read how to do this under [Forgotten password](/ik-ben-mijn-wachtwoord-vergeten-wat-moet-ik-doen).

Laposta does not require you to periodically set a new password. Such a requirement has disadvantages: users often choose weaker passwords in which they reuse patterns, write down their password and become frustrated.

## Adding extra security to your login with two-step verification

Multi-factor authentication (also known as two-step verification, two-factor authentication or 2FA) is a better security measure than being required to periodically set a new password. Every user can set up 2FA themselves, and organisations can make 2FA mandatory for all their users in an account. [Read how to activate 2FA in your account](/tweestapsverificatie).

If you have a paid account, you can also have another custom authentication method set up: [Single Sign-On (SSO)](/single-sign-on-sso).

## Related articles

#### [Setting up two-step verification](/tweestapsverificatie)

Secure your account with an extra login step via an authenticator app or SMS.

#### [Configuring domain authentication step by step](/stap-voor-stap-je-domein-authenticeren)

Look up the DNS records for your domain, add them at your domain provider and activate…

#### [Logging in to the management environment](/inloggen-bij-d-beheeromgeving)

You log in to your management environment at beheer.laposta.nl. There you can also…

#### [Changing My data](/waar-kan-ik-zelf-mijn-login-veranderen)

Edit your account name, name and login details yourself under Login → My data.