---
title: Manage settings
description: Configure login security and password policies in Telegraf Controller.
url: https://docs.influxdata.com/telegraf/controller/settings/
estimated_tokens: 2026
product: Telegraf
version: v1
---

# Manage settings

#### Telegraf Controller is in Public Beta

Telegraf Controller is in public beta and will be part of the future Telegraf Enterprise offering. While in beta, Telegraf Controller is **not meant for production use**. The Telegraf Controller documentation is a work in progress, and we are actively working to improve it. If you have any questions or suggestions, please [submit an issue](https://github.com/influxdata/docs-v2/issues/new?labels=Telegraf%20Controller). We welcome any and all contributions.

Beta expectations

-   **No configuration or agent limits**  
    While in beta, Telegraf Controller doesn't place any limits on the number of configurations you can store or the number of Telegraf agents you can track. However, upon being generally available, the free distribution of Telegraf Controller will have limits introduced, with the option to increase limits through a Telegraf Enterprise license.
-   **Potential breaking changes**  
    While in beta, we will do our best to no longer make breaking changes to Telegraf Controller, however, they may be necessary. The majority of changes we make will be additive and non-breaking, and include any necessary migrations. When we do need to make breaking changes, we will do our best to communicate them clearly and in advance to minimize disruption.
-   **Flexible release schedule**  
    While in beta, we will continue to create new releases of Telegraf Controller, but likely at irregular intervals. We will provide [Telegraf Controller release notes](/telegraf/controller/reference/release-notes/) to make it easy to track updates.

Provide beta feedback

-   Use the **Feedback** feature in the Telegraf Controller UI.
-   [Join the InfluxDB Community Slack](https://influxdata.com/slack) and post feedback in the **#telegraf-enterprise-alpha** channel.
-   Post feedback in the [InfluxData Community](https://community.influxdata.com).

Join our public channels

-   [InfluxDB Community Slack *(Preferred)*](https://influxdata.com/slack)
-   [InfluxData Community](https://community.influxdata.com)
-   [InfluxDB Subreddit](https://reddit.com/r/influxdb)

Owners and administrators can configure login security and password requirements for Telegraf Controller.

Navigate to the **Settings** page from the left navigation menu to view and modify these settings.

## Login security

### Login attempts

You can configure the number of failed login attempts allowed before an account is locked out. The default threshold is 5 attempts, with a minimum of 1.

To change the login attempt threshold:

1. Navigate to the **Settings** page.
2. Update the **Login attempts** value.
3. Click **Save**.

### Login lockout

When a user exceeds the failed attempt threshold, their account is locked for a configurable duration. The default lockout duration is 15 minutes, with a minimum of 1 minute. The lockout clears automatically after the configured duration has elapsed.

To change the lockout duration:

1. Navigate to the **Settings** page.
2. Update the **Login lockout duration** value.
3. Click **Save**.

If a user is locked out, an owner or administrator can [reset their password](/telegraf/controller/users/update/#reset-a-users-password) to unlock the account.

### Password complexity requirements

Telegraf Controller provides three password complexity levels that apply to all password operations, including initial setup, password changes, password resets, and invite completion.

| Level | Min length | Uppercase* | Lowercase* | Digits* | Special characters* |
| --- | --- | --- | --- | --- | --- |
| Low | 8 | No | No | No | No |
| Medium | 10 | Yes | Yes | Yes | No |
| High | 12 | Yes | Yes | Yes | Yes |

\* Passwords require at least one of the defined character types.

To change the password complexity level:

1. Navigate to the **Settings** page.
2. Select the desired **Password complexity** level.
3. Click **Save**.

Changing the password complexity level does not affect existing passwords. The new requirements apply only when users set or change their passwords.

### Environment variables

You can set initial defaults for login security settings using environment variables. These values are applied when Telegraf Controller initializes its settings for the first time. Changes made on the **Settings** page override initialized settings.

| Environment variable | Description | Default |
| --- | --- | --- |
| LOGIN_LOCKOUT_ATTEMPTS | Failed attempts before lockout | 5 |
| LOGIN_LOCKOUT_MINUTES | Minutes to lock account | 15 |
| PASSWORD_COMPLEXITY | Complexity level (low, medium, high) | low |

*For detailed descriptions and bootstrap behavior, see the [Authentication and security section in the configuration options reference](/telegraf/controller/reference/config-options/#authentication-and-security).*

#### Related

-   [Telegraf Controller configuration options](/telegraf/controller/reference/config-options/)
-   [Authorization](/telegraf/controller/reference/authorization/)