Apply password settings for mobile devices

If you have the legacy free edition of G Suite, upgrade to G Suite Basic to get this feature. 

As an administrator, you can protect data by making sure that managed devices have a screen lock or password. If you use basic management, you can require that devices have a screen lock or password on their device. With advanced management you can enforce stronger passwords that have minimum requirements, make sure that users reset their password regularly, and more.  

Before you begin

  • If you use basic management and want to enforce device passwords, users with Android 5.1.1 Lollipop and earlier devices need to install the Google Apps Device Policy app. For details, see Basic management. Passcodes are not enforced on Apple® iOS® 7 and earlier devices. 
  • To set standard or strong passwords that define the password’s strength (including a minimum number of characters) you need to use advanced mobile management. For details, see Set up advanced mobile management.

Apply password settings

Basic management
With basic management, you can require users to set a screen lock or passcode on their device. There are no minimum requirements for the password. 
  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Device management.

    To see Device management, you might have to click More controls at the bottom.

  3. Click Password settings
  4. Check the Require users to set a password box.
  5. Next to Password strength, select Basic (Any screenlock)
  6. (Optional) To enforce passwords on devices older than Android 6.0 Marshmallow, check the Require users of pre-Android 6.0 (Marshmallow) devices to set a password box. Then click Require Password. Users of those devices are prompted to install the Google Apps Device Policy app. 
  7. Click Save.
Advanced management
With advanced management you can set stronger passwords that have a minimum number of characters and make sure that users reset their password regularly. 
  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Device management.

    To see Device management, you might have to click More controls at the bottom.

  3. Click Password settings
  4. Check the Require users to set a password box.
  5. (Optional) On the left, select the organization to which you want to apply the settings.
  6. Choose a password strength:
    • Basic—Requires a screen lock or password. There are no minimum password requirements. 
    • Standard—Requires a PIN or password. Screen lock patterns are not accepted. A password can contain any characters in any order. 
    • Strong—Requires at least one character, number, and symbol. (Not supported on Windows Phone 7 and 7.5 devices.)
  7. Next to Minimum number of characters, enter a minimum password length.  Strong passwords should have 3 or more characters.
  8. (Optional) To prompt users to reset their password regularly, check the Number of days before password expires box and enter a number of days before passwords expire. Supported on Android 3.0 Honeycomb and later devices.
  9. (Optional) To prevent the reuse of expired passwords, check the Number of expired passwords that are blocked box and enter the number of previous passwords that can’t be used again. For example, enter 2 to block the user from reusing their last 2 device passwords. Supported on Android 3.0 and later devices.
  10. To lock the device screen after a set time, select a number of minutes from the Automatically lock the device after drop-down menu. For Apple iPhone® devices, the limit is 5 minutes. For iPad® devices, the limit is 15 minutes.
  11. (Optional—Use with caution) To automatically wipe a device when a user enters an incorrect password, check the Number of failed password attempts before device is wiped box and enter a number. For example, if you enter 5, then 4 failed attempts are allowed. After a fifth failed attempt, the device is wiped. Wiping a device resets it to factory settings.
  12. Click Save.

Related topics

Was this article helpful?
How can we improve it?