---
title: Activate Password Generation
slug: activate-password-generation
docTags: 
createdAt: 2025-07-17T03:58:31.107Z
---

The **Activate Password Generation** configuration defines how automatically generated passwords are created when accounts are provisioned or reset.  All generated passwords must comply with the **Active Directory (AD)** or **Entra ID** domain password policy to ensure compliance with corporate security requirements.

## Configuration Path

:::BlockQuote
//Resources/Configuration/Passwords/DefaultRules
:::

This parameter controls the default behaviour for password creation across all workflows that use automatic password generation.

## Overview

Activate supports two password generation modes:

- **keyword** – Builds a password using a random dictionary keyword, followed by numbers or symbols to meet the specified length. 
- **random** – Creates a password using a completely random sequence of characters, including uppercase, lowercase, numeric, and special characters. 

The password generator can optionally apply a **prefix** to all generated passwords — useful for identifying system-generated credentials or enforcing a pattern prefix required by policy.

## Example Configuration

:::BlockQuote
\<passwords>
&#x20; \<type>keyword\</type> \<!-- Options: keyword, random -->
&#x20; \<prefix>A!\</prefix>  \<!-- Optional prefix -->
&#x20; \<length>10\</length>  \<!-- Total password length -->
\</passwords>
:::

**Explanation:**

| Element    | Description                                                                            |
| ---------- | -------------------------------------------------------------------------------------- |
| **type**   | Defines the password generation mode. Options: keyword or random.                      |
| **prefix** | Optional prefix added to the start of each password (e.g., A! for Activate-generated). |
| **length** | Total length of the generated password, including any prefix.                          |

## Password Types

### keyword

Generates a password by selecting a random keyword, then appending random digits and symbols until the required length is reached.
&#x20;This option produces passwords that are easier to remember while still meeting AD policy requirements.

**Example output:**

:::BlockQuote
A!forest92
:::

### random

Creates a password from a fully randomised character set, maximising entropy and security.
&#x20;This is ideal for service accounts or automated provisioning where memorability is not required.

**Character set used:**

:::BlockQuote
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
1234567890
!@#$.:;+\*-&^%
:::

**Example output:**

:::BlockQuote
A!Qp7#tFd8
:::

## Best Practices

- Always confirm the generated passwords comply with your **Active Directory password policy**, including complexity, history, and expiration rules.&#x20;
- Avoid prefixes that could inadvertently expose password origin or system association.&#x20;
- Test password generation after any configuration change to ensure compliance and usability.&#x20;
- Use **keyword mode** for user accounts (more readable) and **random mode** for system or service accounts (more secure).

```text
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuzwxyz1234567890!@#$.:;+*-&^%
```