Issue Summary

Configured a custom password policy for the internal directory and selected the following:

• Password length is 12 characters.
• Under Character type requirements, provide Lowercase letters as 3, Uppercase letters as 3, Digits as 3 and Special characters as 3

When we try to create a new user and select the option to send them a password setup email (by clicking the checkbox), we receive an error message:

The following error(s) occurred:
Password must be at least 12 characters long and contain: - 3 lowercase letters - 3 uppercase letters - 3 digits - 3 special characters

Steps to Reproduce

1. Installed and configured Confluence v9.2.8
2. Configured a mail server
3. Set the custom password policy for the internal directory (12 characters) and save it.
4. Create a new user and select the option to send them a password setup email (by clicking the checkbox).
5. User got created successfully.
6. Now set the custom password policy for the internal directory and select the following:
   • Password length as 12 characters.
   • Under Character type requirements, provide Lowercase letters as 3, Uppercase letters as 3, Digits as 3 and Special characters as 3 and Save
7. Create a new user and select the option to send them a password setup email (by clicking the checkbox).
8. Upon clicking add, we are seeing below error banner:

   The following error(s) occurred:
   Password must be at least 12 characters long and contain: - 3 lowercase letters - 3 uppercase letters - 3 digits - 3 special characters
   

Expected Results

The user should get created successfully.

Actual Results

The following error(s) occurred:
Password must be at least 12 characters long and contain: - 3 lowercase letters - 3 uppercase letters - 3 digits - 3 special characters

The following exception is thrown in the atlassian-confluence.log file:

2025-10-06 15:17:53,192 WARN [http-nio-8090-exec-1 url: /confluence/admin/users/docreateuser.action; user: admin] [confluence.impl.hibernate.ConfluenceHibernateTransactionManager] doRollback Performing rollback. Transactions:\n  ->[null]: PROPAGATION_REQUIRED,ISOLATION_DEFAULT (Session #902670373)
 -- url: /confluence/admin/users/docreateuser.action | userName: admin | action: docreateuser | referer: https://xxxxxxxxxxxxx/confluence/admin/users/createuser.action | traceId: 6d309ffb306b0ca1

Added the com.atlassian.confluence.user DEBUG package. However, no log entries except the above warning stack.

Workaround

Currently, there is no known workaround for this behaviour. A workaround will be added here when available