# Passcode

Last updated: August 14, 2026

This page covers the Knox Passcode Profile settings that allow administrators to define and enforce passcode policies for Samsung Knox containers. It explains the five passcode types ranging from Simple Value to Complex Value, with each level imposing stricter character requirements, and details configuration options such as minimum length, maximum failed attempts, idle timeout, passcode history, and expiry age. Advanced settings for KNOX 2.3 and above include fingerprint unlock and granular character composition rules.

You can define the parameters for creating a passcode and configure the passcode settings here.

| PROFILE SETTINGS | DESCRIPTION |
|---|---|
| Passcode Profile Settings |  |
| Minimum Passcode Requirement | You can define the minimum passcode type required or allowed to create a passcode. The increasing order of security in the passcode type is Simple value → Numbers → Alphabet → Alphanumeric → Complex Value. On choosing a minimum required passcode type, for example, as "Numbers", then the passcode that is set on the device can contain numbers, alphabets, alphanumeric characters, or complex values.<br><br>→ **Simple Value** enables you to set patterns, PIN, or passwords for the container.<br><br>→ On choosing **Numbers**, you can set either a PIN or password for the container. The password can contain numbers, alphabets, alphanumeric, or complex values.<br><br>→ **Alphabet** allows you to set only passwords for the container. The password can contain alphabets, alphanumeric, or complex values.<br><br>**The above passcode types are not applicable for KNOX 1.0.**<br><br>→ **Alphanumeric** passcode allows you to set a password that contains both numbers and alphabets. Special characters can also be included.<br><br>→ **Complex Value** type of passcode enables you to set a password that contains alphabets, numbers, and at least one special character.<br><br>The above passcode types are applicable for **all versions of KNOX.** |
| Minimum passcode length | You can define a minimum length for the passcode here. |
| Maximum number of failed attempts | Maximum number of failed attempts allowed can be specified. When the number of attempts exceeds, the data in the container will be locked. |
| Maximum idle time allowed before auto-lock | Time allowed for the container to be idle. |
| Number of Passcodes to be maintained in the history | Total number of previous passcodes to be maintained, so that it cannot be reused. |
| Maximum Passcode Age | User will be notified to reset the Passcode based on the days specified here. |
| Passcode Profile Settings (Not applicable for KNOX 1.0) |  |
| Unlock Container using Fingerprint (Applicable for KNOX 2.3 and above) | If this is allowed in a container, the user will be able to use fingerprint to unlock the container. The backup password set during fingerprint registration should be simple value, number, alphabet, alphanumeric, or complex according to what you choose as the Minimum Passcode Requirement. |
| Maximum Repetition of Characters | Specify how many times a number or an alphabet can be repeated in the password. For example, if you specify 2 times, you cannot use the same alphabet or number more than twice in the password. This is applicable when you set a Complex Value type of passcode. |
| Maximum Numeric Sequence | Specify how many sequential numbers can be used in the password. For example, if you specify 3, you can use up to 3 sequential numbers such as 123, 456, and so on. |
| Minimum uppercase length | You can define the minimum number of uppercase letters required to create a passcode. |
| Minimum lowercase letter length | You can define the minimum number of lowercase letters required to create a passcode. |
| Minimum letter length | You can define the minimum number of letters required to create a passcode. |
| Minimum Non-Alphabetic Characters | You can define the minimum number of Non-Alphabetic Characters required to create a passcode. |
| Minimum numeric length | You can define the minimum number of numeric values required to create a passcode. |
| Minimum symbol length | You can define the minimum number of symbols required to create a passcode. |

## Frequently Asked Questions

### What's the difference between the passcode types available for Knox containers?

Minimum Passcode Requirement defines the weakest passcode type allowed, ranging from Simple Value and Numbers up to Alphabet, Alphanumeric, and Complex Value, with each higher type enforcing stricter character requirements.

### Can users unlock a Knox container using a fingerprint?

Yes, on KNOX 2.3 and above, you can enable Unlock Container using Fingerprint. A backup password matching your configured Minimum Passcode Requirement is still required during fingerprint registration.

### Are all passcode settings applicable to KNOX 1.0 devices?

No. Settings such as fingerprint unlock, maximum character repetition, and minimum uppercase/lowercase/numeric/symbol length don't apply to KNOX 1.0; only the core Minimum Passcode Requirement types (excluding Alphanumeric and Complex Value) apply.