How to change minimum password length for self hosted

[christianfl]

Hello!

I recently installed Supabase as a self hosted version in Docker. I want to set the minimum password length but cannot find how to do that in the docs.

I guess it should be a key in the .env file like the other things:

## General
SITE_URL=https://URL
ADDITIONAL_REDIRECT_URLS=
JWT_EXPIRY=3600
DISABLE_SIGNUP=false

Can someone tell me how to do that?

Thats in advance,
Christian

[dshukertjr]

Hi @christianfl!

You should be able to configure minimum password length with GOTRUE_PASSWORD_MIN_LENGTH environment variable. I found it on the readme of gotrue.

GOTRUE_PASSWORD_MIN_LENGTH - int
Minimum password length, defaults to 6.

[christianfl]

Thank you very much!

[OyugoObonyo]

Can you reset the minimum password length on the managed supabase service or is this option only available in self-hosted Supabase?

[dshukertjr]

@OyugoObonyo
You can find the minimum password length option in auth -> providers -> email in your Supabase dashboard for all Supabase projeects!

[OyugoObonyo]

Great. I tried lowering the number to 4 to suit my 4-digit-PIN authentication strategy but the insisted minimum is still 6. How then can I go about implementing sign-in with a phone number and 4-digit PIN with Supabase? Would it be ideal for me to ask for a 4-digit PIN from users and then pad the pin in the backend with, let's say symbols so that they meet the 6-digit requirement?

[dshukertjr]

@OyugoObonyo
We would suggest to stick with the minimum requirement that we have for security reasons. If you would like to take a less secure way to implement your auth feature, it would completely at your own responsibility.