In our org, some profiles have their own password policy; these overwrite the general password policy. I would like to return to having only one centralized policy. How can I do that? I cannot find a way to do this via Setup. Could I do this by updating the metadata for profiles directly?


Yes you can do it via metadata.

Thing your looking for is called ProfilePasswordPolicy



  • For documentation: After deleting the ProfilePasswordPolicy files, they are generated again with the settings from the central password policy. So this works. – georg w. May 29 '19 at 16:22

Yes, You need to remove them from each profile and then set on Organization-wide Password Policy.

Here are steps to change it on profile.

  • From Setup, enter Profiles in the Quick Find box, then select Profiles. Select a profile.
  • Depending on which user interface you’re using, do one of the following.
    • Enhanced profile user interface—Click Password Policies, then click Edit.
    • Original profile user interface—Click Edit, then scroll to the Password Policies section.
  • Change the values for the profile.

Here are steps for Org wide settings.

  • From Setup, enter Password Policies in the Quick Find box, then select Password Policies.
  • Customize the password settings.

Some good read for you:

Set Password Policies

View and Edit Password Policies in Profiles

Manage Password Expiration with Password Policies and Permission Sets

  • Hi Tushar, I can edit them on the profile (for example changing "User passwords expire in"), but I cannot remove the password policy settings. I cannot set the settings to be empty. – georg w. May 17 '19 at 11:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.