Skip to content
Last updated

Member password rules

Loyalty members must follow certain rules when choosing their password, as configured in Vista Loyalty. These rules are intended to help the member create a secure password and are enforced by the following endpoints:

Password rule error codes

Depending on configuration, the following errorCode values may be returned for invalid new passwords:

Error codeReason
33000The provided password exceeds the configured maximum password length.
33001The provided password doesn't meet the configured minimum password length.
33002The provided password doesn't include the configured minimum numeric characters.
33003The provided password doesn't include the configured minimum non-numeric characters (alphabetical letters and symbols).
33004The provided password doesn't include the configured minimum distinct characters.
33005The provided password contains the member's email address.
33006The provided password contains the member's username.
33007The provided password contains the member's given name or surname.
33008The provided password appears in the Have I Been Pwned list of known compromised passwords.
33009The provided password contains one or more disallowed words.