| Parameter | Simple definition |
| Require PIN | Requires the user to set a device passcode. |
| Maximum Failed Passcode Attempts | Sets how many incorrect passcode entries are allowed before the device locks or erases data. |
| Minimum Complex Characters | Sets how many special characters, such as ! or #, the passcode must contain. |
| Password History Length | Prevents the user from reusing a recent passcode. For example, 5 means the new passcode must differ from the last five passcodes. |
| Require Alphanumeric Passcode | Requires the passcode to include letters as well as numbers. |
| Password Expiration Timeout | Sets how many days a passcode can be used before it must be changed. 0 means it never expires. |
| Allow Simple Passcode | Allows or blocks easy-to-guess passcodes, such as repeated or sequential characters like 111 or 123. |
| Maximum Grace Period (Minutes) | Sets how long the device can be unlocked without entering its passcode. 0 means the passcode is required immediately. |
| Password Minimum Length | Sets the minimum number of characters the passcode must contain. |
| Maximum Inactivity Lock (Minutes) | Sets how long the device can remain inactive before it locks. |