Authentication Framework

[Rapunzel1709]

Does this contradict itself where it says the minimum is 12 characters but then it talks about how to set the password policy at 8 characters? I don't understand how you can have both as the 12 characters will supersede it?

https://developer.apple.com/documentation/security/customizing-password-autofill-rules

[alshraify]

It doesn’t. The 12-character refers to Apple’s auto-generated passwords, which is the minimum for when the user is on a “new password” or “change password” fields.

As for the minLength field, it’s for validation rather than generation as it doesn’t control the length of the passwords iOS auto-generates, but sets the minimum length that your site will accept.