Portal Password Policy
Ensure portal customers and partners follow minimum password requirements too
The auth_password_policy_portal module applies password rules to portal users so they cannot set weak passwords when changing or resetting their credentials.
This keeps portal users and internal employees aligned with the same baseline security policy in Odoo.
Password policy for portal users
Key points
• Applies to portal users such as customers and partners.
• Checks passwords when users change them inside the portal.
• Also applies to password reset flows by email.
• Displays clear validation messages, including Vietnamese translations when needed.
Change password in the portal
Steps
1. Sign in to the portal with the current account.
2. Open My Account or Security.
3. Go to the Change Password section.
4. Enter the current password and the new password.
5. Review the requirement message such as “Password must be at least 8 characters”.
6. If the password passes validation, click Change Password to save it.
How password requirements are shown
When the user enters a new password, the portal shows the minimum-length requirement directly on the form to reduce submission errors.
The exact minimum length depends on the value configured in the base password policy module.
Information shown to the user
| Item | Meaning |
|---|---|
| Password must be at least X characters | Reminds the user about the current minimum length. |
| Error message on submit | Prevents saving a password that does not meet policy. |
| Vietnamese translation | Helps portal users understand validation errors more clearly. |
When is the policy enforced?
Key points
• When a portal user changes the password on the security page.
• When a portal user resets the password by email.
• When auth_signup is present, the same requirements may continue into new signup flows.
Important notes
Key points
• The module auto-installs when both auth_password_policy and portal are available.
• Portal policy should stay aligned with the password rules used for internal employees.
• If the minimum length is set to 0 or the module is not installed, users may not see any password requirement.
• Clear validation messages reduce repeated failed attempts during password changes.
Troubleshooting
Common issues
| Issue | Cause | Solution |
|---|---|---|
| Password requirement is not visible | Module is not installed or the policy is set to 0 | Check module installation and minimum-length configuration. |
| Error when changing password | The new password is shorter than required | Enter a longer password that matches the current policy. |
| User does not understand the message | UI language or wording does not match expectations | Check the active language and the validation text shown in the portal. |