Password policy
From MoodleDocs
It is recommended that a password policy is set in Administration > Security > Site policies, since password guessing is very often the easiest way to gain unauthorised access.
See also
- Using Moodle Security and Privacy forum
- Using Moodle Retrospective password policy forum discussion