All ASCII printable characters are supported for passwords.
ISM-2081
Password strength
Australian Cyber Security Centre · Information Security Manual v2026.09.4 · Applicability NC, OS, P, S, TS
Components addressing ISM-2081
implemented Applicability claimed: NC, OS, P, S, TS
Implemented by omission. No character-set restriction is configured, and yescrypt accepts the full ASCII printable range including the space character.
Verified: a candidate interleaving every ASCII printable punctuation character with letters is accepted by pwscore(1). The punctuation set is interleaved because the unbroken set is itself a monotonic codepoint run, which a maxsequence rule correctly rejects.
Configuration and scripts
- config/pwquality.conf.d/40-ism-base.conf pwquality enforcement base
sha256 12441639cb0cfea4b0e7df729d5b39877ce73b79e5e47ee3be3c376f1da1825d - scripts/verify-pwquality-base.sh Verification script
sha256 0b54efd7ea49a3addc5d3eb5f4630102e05dca614372e038b8a5d8fb2e67147a
This control's implementations as an OSCAL component definition (newest version of each component)